JP7259106B2 - Information processing device, information processing method, and information processing system - Google Patents

Description

The present invention relates to an information processing device, an information processing method, and an information processing system.

2. Description of the Related Art Conventionally, there is known a technique of connecting an information terminal and a server to a VPN (Virtual Private Network) in order to prevent information leakage (see, for example, Patent Literature 1).

JP 2020-120216 A

In recent years, as a new way of working, there has been an increase in the number of cases where work is performed using information terminals installed in facilities shared by an unspecified number of people, such as shared offices. To enable access to servers within the company by persons authorized by the company at facilities outside the company, and to prevent unauthorized persons (outsiders) from accessing servers within the company , a method of disclosing information for making a VPN connection to a person authorized by the company is conceivable. However, if the information for VPN connection is disclosed, the information is leaked to an outsider, and the risk of the outsider accessing the server increases.

Accordingly, the present invention has been made in view of these points, and it is an object of the present invention to enable access to an internal company server from an external shared facility while ensuring information security.

An information processing apparatus according to a first aspect of the present invention is an information processing apparatus that manages connection destinations of a plurality of communication lines connected to a plurality of shared facilities that can be used by a plurality of people belonging to a plurality of groups. , facility reservation information indicating the period of use of the shared facility; facility identification information for identifying the shared facility; and connection indicating a connection destination enabling communication with the shared facility via the communication line. a storage unit for storing destination information in association with each other; and a switching device for switching connection destinations of the plurality of communication lines during a period of use indicated by the facility reservation information, for the shared facility corresponding to the facility reservation information. and an instruction unit that transmits connection instruction information instructing that a connection destination of the communication line is a connection destination indicated by the connection destination information corresponding to the facility reservation information.

When the start time of the time period indicated by the facility reservation information comes, the instruction unit connects a network line corresponding to the facility identification information associated with the use period indicated by the facility reservation information and a network line corresponding to the facility identification information. The connection instruction information for connecting to the communication line may be transmitted to the switching device.

When the end time of the time period indicated by the facility reservation information comes, the instruction unit connects a network line corresponding to the facility identification information associated with the use period indicated by the facility reservation information and a network line corresponding to the facility identification information. Disconnection instruction information for disconnecting the communication line may be transmitted to the switching device.

After transmitting the connection instruction information, the instruction unit may transmit display instruction information for displaying the data received from the connection destination to a display device installed in the shared facility.

The instruction unit may transmit the connection instruction information including information necessary for the switching device to establish a connection with the connection destination communication device.

An information processing method according to a second aspect of the present invention is an information processing method in which a computer manages connection destinations of a plurality of communication lines connected to a plurality of shared facilities that can be used by a plurality of people belonging to a plurality of groups. facility reservation information indicating the period of use of the shared facility, facility identification information for identifying the shared facility, and a connection destination enabling communication with the shared facility via the communication line. a step of associating and storing connection destination information indicated by said facility reservation information; and transmitting connection instruction information instructing that the connection destination of the communication line be the connection destination indicated by the connection destination information corresponding to the facility reservation information.

An information processing system according to a third aspect of the present invention includes an information processing device that manages connection destinations of a plurality of communication lines connected to a plurality of shared facilities that can be used by a plurality of people belonging to a plurality of groups; a switching device for switching connection destinations of the plurality of communication lines based on control of a processing device, wherein the information processing device includes facility reservation information indicating a period of use of the shared facility; a storage unit that associates and stores facility identification information for identifying a facility and connection destination information that indicates a connection destination enabling communication with the shared facility via the communication line; and the facility reservation. During the period of use indicated by the information, the connection destination of the communication line of the shared facility corresponding to the facility reservation information is set to the switching device for switching the connection destination of the plurality of communication lines. an instruction unit for transmitting connection instruction information instructing to use the connection destination indicated by the connection destination information, wherein the switching device includes a first connection unit connected to the plurality of communication lines; a second connection unit connected to a plurality of connection communication lines provided between a connection destination and receiving the connection instruction information; a connection processing unit that connects the communication line corresponding to the facility reservation information to a connection communication line selected from the plurality of connection communication lines.

According to the present invention, it is possible to access a company server from an external shared facility while ensuring information security.

It is a figure which shows the structure of an information processing system. 3 is a diagram showing the configuration of a management server 1 and a gateway; FIG. It is a figure which shows an example of the database which the memory|storage part memorize|stores. It is a figure which shows an example of the database in which the predetermined relationship was registered. FIG. 4 is a sequence diagram showing an example of the flow of operations of the information processing system; It is a figure which shows an example of the database containing facility reservation information.

[Overview of information processing system S]
FIG. 1 is a diagram showing the configuration of an information processing system S. As shown in FIG. The information processing system S uses an information terminal 20 installed in a shared facility that can be used by people belonging to different companies (hereinafter referred to as "user U"). It is a system for enabling access to a connection destination server 3 (for example, a file server, a computer, a storage device). A shared facility is, for example, a space that can be used by a plurality of users U at a reserved date and time and that unauthorized persons (outsiders) cannot enter, and is a so-called shared room.

FIG. 1 shows a plurality of shared rooms R (R-1 to Rn) provided in an office F as an example of shared facilities. FIG. 1 shows a state in which user U-1 is in share room R-1 and user Un is in share room R-n. A reader 10 is provided at the entrance of each shared room R, and an information terminal 20 is installed inside the shared facility R. The information terminal 20 is a terminal used by the user U for business, and includes, for example, at least one of a computer, a display, an electronic blackboard, an imaging device, and a printer.

An information processing system S includes a management server 1 and a gateway 2 . The management server 1 manages connection destinations of network lines N (N-1 to Nn), which are a plurality of communication lines connected to a plurality of shared facilities R that can be used by a plurality of users U belonging to a plurality of groups. It is an information processing device that A group is, for example, a company or a project team, and the following description exemplifies a case where the group is a company. Note that one or more arbitrary number of users U may belong to one group.

The gateway 2 is a switching device that switches connection destinations of a plurality of network lines N. FIG. The gateway 2 authenticates the connected devices (the information terminal 20 and the server 3), and does not switch the connected devices of the devices if the authentication fails. For example, if the information terminal 20 is not connected to the server 3 and authentication fails, the gateway 2 does not connect the information terminal 20 to any server 3 .

The management server 1 switches the connection destination of the network line N connected to the information terminal 20 by controlling the gateway 2 . The connection destination is one of a plurality of servers 3, which are information devices with which the information terminal 20 can transmit and receive data via a plurality of communication lines T (T-1 to T-3) connected to the gateway 2. FIG. In FIG. 1, a server 3-1 of company A, a server 3-2 of company B, and a server 3-3 of company C are illustrated as connection destinations. The connection destination is not limited to the server 3, and may be other information equipment having a communication function.

The communication line T is a communication line that enables secure communication between the information terminal 20 connected to the gateway 2 and the server 3 . The communication line T is, for example, a dedicated line or a line using a closed network, but may be a VPN (Virtual Private Network).

The reading device 10 is a device for authenticating the user U before the user U enters the shared facility R. As an example, the reading device 10 reads information stored in a card held by the user U (for example, a membership card or an employee card). read. The card read by the reader 10 contains user identification information (hereinafter referred to as "user ID") for identifying the user U or group identification information (hereinafter referred to as "group ID") for identifying the group to which the user U belongs. ) is stored.

The reading device 10 is provided on the route to enter the shared facility R, for example. The reading device 10 may be installed at the entrance of the shared facility R, or may be installed at the entrance of an office F having a plurality of shared facilities R or a building housing a plurality of shared facilities R. Further, the reader 10 may be configured to read the card held by the user U even when the user U leaves the shared facility R.

The reading device 10 is connected to a network device 30 via network lines M (M-1 to Mn) such as LAN (Local Area Network) cables. The reading device 10 transmits the read group ID to the management server 1 via the network line M. FIG. As will be described later, the group ID transmitted to the management server 1 is used to switch the connection destination of the information terminal 20 installed in the shared facility R. FIG.

The information terminal 20 is, for example, a computer as described above. Although FIG. 1 illustrates a case where one information terminal 20 is installed in each shared facility R, a plurality of information terminals 20 may be installed in each shared facility R. The information terminal 20 installed in each shared facility R is connected to a network device 30 by network lines N (N-1 to Nn) such as LAN cables.

A network device 30 (“NW device” in FIG. 1) is connected to reading devices 10 and information terminals 20 installed in a plurality of shared facilities R. As shown in FIG. The network device 30 is, for example, a router, transmits data received from the reading device 10 to the management server 1 , and transmits data received from the information terminal 20 to the gateway 2 . Also, it transmits the data received from the gateway 2 to the information terminal 20 .

An outline of the operation of the information processing system S will be described below with reference to FIG. When the reading device 10 transmits the group ID read from the card of the user U to the management server 1 ((1) in FIG. 1), the management server 1 associates the group ID, the facility ID, and the connection destination ID. By referring to the database, the facility ID and the connection destination ID corresponding to the group ID received from the reader 10 are specified ((2) in FIG. 1). The facility ID is facility identification information for identifying the shared facility R. FIG. The connection destination ID is connection destination identification information for identifying the server 3 connected to the gateway 2 .

In order to connect the information terminal 20 installed in the shared facility R used by the user U and the server 3 accessible by the user U, the management server 1 provides connection instruction information including the specified facility ID and connection destination ID. is notified to the gateway 2 ((3) in FIG. 1). The gateway 2 sets the network line N corresponding to the facility ID to the connection destination ID in order to connect the network line N corresponding to the facility ID included in the notified connection instruction information to the server 3 corresponding to the connection destination ID. It connects to the communication line T connected to the corresponding server 3 .

By operating the management server 1 and the gateway 2 as described above, when the user U enters the shared facility R, the information terminal 20 can access the server 3 to which the user U is authorized to access. . The information terminal 20 cannot access the server 3 to which the user U does not have access authority. Therefore, even when a plurality of users U belonging to a plurality of different companies use the information terminal 20 installed in the shared facility R, it is possible to ensure safety when accessing the server within the company.
The configurations and operations of the management server 1 and gateway 2 will be described in detail below.

[Configuration of Management Server 1 and Gateway 2]
FIG. 2 is a diagram showing the configuration of the management server 1 and gateway 2. As shown in FIG. The management server 1 has a communication section 11 , a storage section 12 and a control section 13 . The control unit 13 has an information acquisition unit 131 , a specification unit 132 and an instruction unit 133 . The gateway 2 has a connection processing section 21 , a storage section 22 , a switch 23 , a first connection section 24 and a second connection section 25 .

The communication unit 11 has a communication interface for transmitting and receiving data with the gateway 2 . The communication unit 11 may have, for example, a LAN interface or a USB (Universal Serial Bus) interface.

The storage unit 12 includes storage media such as ROM (Read Only Memory), RAM (Random Access Memory), and SSD (Solid State Drive). The storage unit 12 stores programs executed by the control unit 13 . In addition, the storage unit 12 specifies, based on the group ID received from the reading device 10, the shared facility R in which the information terminal 20 used by the user U is installed and the server 3 accessible by the user U. database. The storage unit 12 stores, for example, a group ID for identifying a group, a facility ID for identifying a shared facility R, and a connection destination that enables communication with the shared facility R via a communication line T. and the connection destination information shown are associated with each other and stored.

FIG. 3 is a diagram showing an example of a database stored in the storage unit 12. As shown in FIG. In the database shown in FIG. 3, group IDs, facility IDs, and connection destination IDs indicating connection destination lines are associated with each other. In the database, the date and time of using the facility and the user ID for identifying the user U may be associated with the facility ID.

The storage unit 12 may store these data for each date and time. As an example, the user U inputs in advance the date and time of use of the shared facility R and the shared facility R to be used at a predetermined reservation site using his/her own computer, thereby registering various data in the above database.

FIG. 3A shows data corresponding to the first date and time. User U belonging to the group with group ID A uses shared facility R-1, and user U belonging to group ID B shares common facility R-1. The use of facility R-2 is indicated. At this date and time, the information terminal 20 installed in the shared facility R-1 is connected to the server 3-1 of company A via the line T-1 for company A. Further, the information terminal 20 installed in the shared facility Rn is connected to the server 3-2 of the company B through the line T-2 for the company B.

FIG. 3(b) shows data corresponding to the second date and time. User U belonging to the group with group ID A uses shared facility R-2, and user U belonging to group ID C shares common facility R-2. Facility R-3 is shown to be used. At this date and time, the information terminal 20 installed in the shared facility R-2 is connected to the server 3-1 of company A through the line T-1 for company A. Further, the information terminal 20 installed in the shared facility R-3 is connected to the server 3-3 of the C company via the C company line T-3.

The storage unit 12 may further store data indicating a log of transmission and reception of data by the information terminals 20 installed in each of the plurality of shared facilities R. FIG. The storage unit 12 may store the log in association with the group ID, or may store the log in association with the user ID, for example.

The control unit 13 has, for example, a CPU (Central Processing Unit). The control unit 13 functions as an information acquisition unit 131 , a specification unit 132 and an instruction unit 133 by executing programs stored in the storage unit 12 .

The information acquisition unit 131 acquires a group ID corresponding to the user U who uses the shared facility R. The information acquisition unit 131 acquires room entry information including the group ID read from the user U's card by the reading device 10 via the communication unit 11, for example. The information acquiring unit 131 notifies the specifying unit 132 of the acquired group ID. The information acquisition unit 131 may acquire room exit information including the group ID read from the user U's card by the reading device 10 when the user U leaves the shared facility R. FIG.

In addition, the information acquisition unit 131 may acquire various types of setting information. The setting information is information for setting the operation mode of the information terminal 20, for example. The information acquisition unit 131, for example, acquires setting information remotely transmitted by the user U or the administrator of the company to which the user U belongs. Further, the information acquisition unit 131 acquires reservation information for the user U to use the shared facility R, and stores data as shown in FIG.

The specifying unit 132 specifies the facility ID and the connection destination information stored in the storage unit 12 in association with the acquired group ID. As an example, when the specifying unit 132 acquires room entry information with a group ID of A at the date and time corresponding to the data shown in FIG. It specifies that the line to be connected is the line T-1 for company A. The identification unit 132 notifies the instruction unit 133 of the identified facility ID and connection destination information.

The specifying unit 132 specifies the connection destination of the network line N of the shared facility R corresponding to the facility ID specified by the specifying unit 132, to the gateway 2 that switches the connection destination of the plurality of network lines N. It transmits connection instruction information that instructs to use the connection destination indicated by the connection destination information. For example, when the specifying unit 132 specifies that the facility ID is shared facility R-1 and the connection destination line is company A's line T-1, the instructing unit 133 determines that the shared facility R-1 is connected. It transmits to the gateway 2 connection instruction information for instructing to connect the network line N-1 to the communication line T-1. Further, when the information acquisition unit 131 acquires room exit information indicating that the user U has left the shared facility R, the instruction unit 133 provides a disconnection instruction to disconnect the connection between the network line N and the communication line T. Information may be sent to gateway 2 .

The instructing unit 133 may transmit to the gateway 2 connection instruction information including information required for the gateway 2 to establish a connection with a destination communication device (for example, a router). For example, when the communication line T is a VPN line, the instruction unit 133 transmits to the gateway 2 connection instruction information including information such as encryption key information, login ID and password required for VPN connection.

In the gateway 2, the connection processing unit 21 receives the connection instruction information and the disconnection instruction information. The connection processing unit 21 is, for example, a CPU, and by executing a program stored in the storage unit 22, specifies the facility ID and connection destination included in the connection instruction information. The connection processing unit 21 connects at least one network line N among the plurality of network lines N to the communication line T selected from the plurality of communication lines T based on the connection instruction information. The connection processing unit 21 controls the switch 23 to connect the network line N corresponding to the facility ID and the communication line T corresponding to the connection destination based on the specified facility ID and connection destination. Further, the connection processing unit 21 controls the changeover switch 23 so as to disconnect the network line N and the communication line T when disconnection instruction information is received.

The changeover switch 23 is notified from the connection processing unit 21 of the plurality of network lines N connected via the first connection unit 24 and the plurality of communication lines T connected via the second connection unit 25. It has a matrix switch for connecting the network line N and the communication line T corresponding to the facility ID and connection destination. When there are n network lines N and m communication lines T, the switch 23 can connect the network lines N and the communication lines T in n×m combinations.

[Details of Control of Instruction Unit 133]
A plurality of users U belonging to different groups may enter the shared facility R. If the server 3 is accessed while a user U belonging to another company is present, the screen may be viewed by the user U belonging to the other company, which may cause an information security problem. Therefore, the information acquisition unit 131 acquires another group ID read by the reading device 10 and notifies the instruction unit 133 of the acquired group ID. The instruction unit 133 determines whether or not to transmit the connection instruction information to the gateway 2 based on the other group IDs acquired by the information acquisition unit 131 .

The instruction unit 133 transmits the connection instruction information to the gateway 2, for example, on condition that there is no other user U corresponding to a group ID different from the group ID corresponding to the user U in the shared facility R. By the operation of the instruction unit 133 in this way, for example, the information displayed on the screen of the information terminal 20 when the user U belonging to company A accesses the server 3-1 of company A can be displayed by the user U belonging to another company. safety is improved because the

However, there is a case where the business is jointly carried out with a user U belonging to another group. In such a case, if the user U cannot access the server 3 due to the presence of the user U belonging to another group, business will be hindered. Therefore, when the group ID of the user U and the group ID of another user U who is in the same shared facility R have a predetermined relationship, the instruction unit 133 determines that the other user U is in the shared facility R. Alternatively, connection instruction information for connecting the information terminal 20 to the server 3 may be transmitted to the gateway 2 . The predetermined relationship is stored in the storage unit 12 in advance, for example. determine whether

FIG. 4 is a diagram showing an example of a database in which predetermined relationships are registered. In FIG. 4, group IDs A and B are associated with shared facility R-1. The connection destination ID is set to be the line for A company T-1. In such a case, the instruction unit 133 connects the information terminal 20 to the communication line T-1 even when the user U whose group ID is B is in the shared facility R-1.

Note that the management server 1 associates the connection destination line with the user U with the group ID of B on the condition that the user U with the group ID of A or the administrator performs a predetermined operation, and sets the connection destination line to the communication line T-1. may be set to By operating the management server 1 in this way, it is possible to prevent a user U belonging to another group from accessing the server 3 for which they are not authorized to access.

In addition, when a user U works jointly with another user U who belongs to another group, the level of information that can be disclosed may differ depending on which group the other user U belongs to. Therefore, the storage unit 12 stores a plurality of connection destination information in association with the group ID, and the instruction unit 133 selects the connection destination of the network line N from the group ID stored in advance in the storage unit 12 and other groups. A connection destination corresponding to connection destination information selected from a plurality of connection destination information may be determined based on the content of the relationship with the ID.

As an example, company A has a first server accessible only by user U belonging to company A, a second server accessible together with user U belonging to company B, and a third server accessible together with user U belonging to company C. Suppose you have a server and In such a case, when the instruction unit 133 determines that only the user U belonging to company A is in the shared facility R-1, the instruction unit 133 connects to the network line N-1 connected to the shared facility R-1 and the first server. It instructs the gateway 2 to connect with the communication line T that has been sent.

When the instruction unit 133 determines that the user U belonging to the company B is also in the shared facility R-1 while the user U belonging to the company A is in the shared facility R-1, the user U belonging to the company B is connected to the shared facility R-1. The gateway 2 is instructed to connect the network line N-1 and the communication line T connected to the second server. When the instruction unit 133 determines that the user U belonging to the company A is also in the shared facility R-1 while the user U belonging to the company A is in the shared facility R-1, the instruction unit 133 determines that the user U belonging to the company C is also in the shared facility R-1. The gateway 2 is instructed to connect the network line N-1 and the communication line T connected to the third server. By operating the instruction unit 133 in this way, the user U can access the appropriate server 3 according to the relationship with other users U in the same shared facility R. information becomes accessible.

By the way, if a user U belonging to another company enters the screen while the user U belonging to company A is accessing the server 3-1 of company A, an information security problem may occur. Therefore, when the instruction unit 133 detects that another user U corresponding to a group ID different from the group ID corresponding to the user U is in the shared facility R after transmitting the connection instruction information to the gateway 2, , the gateway 2 may transmit disconnection instruction information instructing disconnection between the communication line and the connection destination. By operating the instruction unit 133 in this manner, the information displayed on the information terminal 20 used by the user U cannot be seen by the users U belonging to other groups, thereby improving safety.

[Device settings in shared facility R]
When the user U uses an electronic device such as the information terminal 20 installed in the common facility R, if the settings of the electronic device are the same as those used by another user U, the settings are reset. need may arise. Therefore, the storage unit 12 stores setting information indicating setting details in association with a group ID and an electronic device. , the setting instruction information including the setting information corresponding to the group ID may be transmitted. The instruction unit 133 may transmit setting instruction information including setting information corresponding to the user ID of the user U to one or more electronic devices installed in the shared facility R. For example, when the user U enters the room, the instruction unit 133 transmits setting instruction information to the information terminal 20 for automatically logging in to the information terminal 20 using the group ID of the user U, or sets the display mode of the display. to the information terminal 20.

Further, when a large display device (such as a display or a projector) connected to the network line N is installed in the shared facility R, the instruction unit 133 transmits the connection instruction information, and then displays the display installed in the shared facility R. Display instruction information for displaying the data received from the connection destination corresponding to the group ID of the user U entering the shared facility R may be transmitted to the display device. When the instruction unit 133 operates in this manner, after the user U enters the shared facility R, for example, an online conference can be immediately started with other employees of the company to which the user U belongs, the whiteboard function, The sticky note function makes it possible to resume brainstorming from where it left off last time.

[Operation sequence of information processing system S]
FIG. 5 is a sequence diagram showing an example of the flow of operations of the information processing system S. As shown in FIG. The sequence diagram shown in FIG. 5 shows the flow of operations when it is determined whether or not there is another user U in the shared facility R. As shown in FIG.

The sequence diagram shown in FIG. 5 starts when the user U enters the shared facility R. In FIG. When the user U enters the shared facility R, the user U brings his or her membership card close to the reading device 10 so that the reading device 10 reads the group ID stored in the card and reads room entry information including the group ID. to the management server 1.

In the management server 1, the specifying unit 132 specifies the facility ID and the connection destination ID stored in the storage unit 12 in association with the group ID transmitted from the reading device 10 (S11). Subsequently, the instruction unit 133 determines whether or not another user U is in the shared facility R (S12). When determining that there is no other user U, the instruction unit 133 transmits connection instruction information to the gateway 2 .

On the other hand, if the instruction unit 133 determines that there is another user U, the instruction unit 133 does not transmit the connection instruction information to the gateway 2, and for example, sends warning information to the information terminal of the pre-registered user U or the information terminal 20. is transmitted (S13). By seeing the warning information displayed on his/her own information terminal or the information terminal 20, the user U can recognize that the server 3 cannot be accessed because another user U is present.

[First modification]
In the above description, the reading device 10 reads the group ID, but the reading device 10 may read the user ID for identifying the user U and transmit the user ID to the management server 1 . In this case, the storage unit 12 stores the user ID for identifying the user U in association with the group ID, and the information acquisition unit 131 associates the user ID read by the reading device 10 with the The group ID is obtained by reading out the group ID stored in the .

The storage unit 12 may store a facility ID and connection destination information for each combination of a group ID and a user ID. In this case, the instruction unit 133 transmits to the gateway 2 connection instruction information for connecting the network line N to the connection destination corresponding to the combination of the group ID and the user ID. By operating the management server 1 in this manner, it becomes easier to manage access for each user U when the access authority differs depending on the user U, even if the users U belong to the same group.

[Second modification]
In the above description, the instruction unit 133 controls the connection destination of the network line N based on the group ID stored in the storage unit 12, but the management server 1 controls the connection of the network line N without using the group ID. You can control the destination. The storage unit 12 stores, for example, facility reservation information indicating the period of use of the shared facility R, a facility ID for identifying the shared facility R, and a connection that enables communication with the shared facility R via a communication line. and connection destination information indicating the destination are associated with each other and stored. Then, when the usage period indicated by the facility reservation information comes, the instruction unit 133 instructs the gateway 2 to set the connection destination of the network line N of the shared facility R corresponding to the facility reservation information to the facility reservation information. It transmits connection instruction information that instructs to use the connection destination indicated by the connection destination information.

FIG. 6 is a diagram showing an example of a database containing facility reservation information. In FIG. 6, facility reservation information, facility IDs, and connection destination IDs are associated with each other. At the start time of the time slot indicated by the facility reservation information, the instruction unit 133 transmits to the gateway 2 connection instruction information for connecting the network line N of the facility ID and the connection destination line corresponding to the facility ID. Then, when the end time of the time zone indicated by the facility reservation information comes, the instruction unit 133 sends disconnection instruction information for disconnecting the network line N of the facility ID from the connection destination line corresponding to the facility ID to the gateway 2. Send to By operating the management server 1 in this manner, the user U can use the information terminal 20 during the time reserved by the user U without installing the reading device 10 in the shared facility R, while ensuring information security. It becomes possible to access the server 3 by Furthermore, since the user U does not need to carry a card, convenience is improved.

[Third Modification]
In the above description, the reading device 10 identifies the group ID by reading the card held by the user U, but the method of identifying the group ID by the reading device 10 is not limited to this, and there are other methods. The group ID may be specified by. For example, the reading device 10 captures an image of the face of the user U, identifies the user U by performing matching processing between the captured and generated face image and a pre-registered face image, and associates the identified user U with a face image. group ID may be specified. The reading device 10 may read biometric information, a two-dimensional code (for example, a QR code (registered trademark)), or read information unique to the user U from an information terminal used by the user U. The reading device 10 may read the information from the information terminal using short-range wireless communication or wireless communication means such as Bluetooth (registered trademark).

[Fourth Modification]
In the above description, the case where the management server 1 associates and stores the group ID, the facility ID, and the connection destination ID was illustrated, but the management server 1 associates and stores the group ID and the connection destination ID, It is not necessary to store the facility ID. In this case, when the management server 1 acquires the group ID or the user ID from the reading device 10, the management server 1 identifies the facility ID based on the identification information of the reading device 10 that has transmitted the group ID or the user ID.

[Effects of information processing system S]
As described above, the information processing system S includes the gateway 2 that switches connection destinations of the plurality of network lines N connected to each of the plurality of shared facilities R, and the management server 1 that controls the gateway 2 . In the management server 1, the specifying unit 132 specifies the facility ID and the connection destination based on the group ID of the user U who uses the shared facility R, and the instruction unit 133 specifies the facility specified by the specifying unit 132. The connection instruction information is transmitted to the gateway 2 to instruct the connection destination of the network line N of the shared facility R corresponding to the ID to be the connection destination indicated by the connection destination information specified by the specifying unit 132 .

By configuring the information processing system S in this way, even when a plurality of users U belonging to a plurality of groups can use the information terminal 20 installed in the shared facility R, the user U can Only accessible servers 3 are accessed, and other servers 3 are not accessible. Therefore, the information processing system S allows a plurality of users U belonging to a plurality of groups to share the information terminal 20 installed in the shared facility R while ensuring information security.

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments, and various modifications and changes are possible within the scope of the gist thereof. be. For example, all or part of the device can be functionally or physically distributed and integrated in arbitrary units. In addition, new embodiments resulting from arbitrary combinations of multiple embodiments are also included in the embodiments of the present invention. The effect of the new embodiment caused by the combination has the effect of the original embodiment.

1 Management server 2 Gateway 3 Server 10 Reader 11 Communication unit 12 Storage unit 13 Control unit 20 Information terminal 21 Connection processing unit 22 Storage unit 23 Switch 24 First connection unit 25 Second connection unit 30 Network device 131 Information acquisition unit 132 Identification unit 133 Instruction unit

Claims (8)

An information processing device for managing connection destinations of a plurality of facility communication lines connected to a plurality of shared facilities that can be used by a plurality of people belonging to a plurality of groups,
Facility reservation information indicating the period of use of the shared facility, facility identification information for identifying the shared facility, and a connection communication line connected to a server serving as a connection destination of the shared facility corresponding to the facility identification information a storage unit that associates and stores connection destination information indicating
Which of the plurality of connection communication lines is to be connected to the facility communication line of the shared facility associated with the facility reservation information in the storage unit during the use period indicated by the facility reservation information to the switching device for switching between the facilities, to set the connection destination of the facility communication line of the shared facility corresponding to the facility reservation information to the connection communication line indicated by the connection destination information corresponding to the facility reservation information. an instruction unit that transmits connection instruction information to
Information processing device having said group identification information from a card installed in said shared facility and storing group identification information for identifying a group to which a person who intends to enter said shared facility belongs among a plurality of persons belonging to said plurality of groups; an information acquisition unit that acquires the group identification information from a reading device that reads the
When the information acquisition unit acquires the group identification information corresponding to the facility reservation information, the information acquisition unit identifies the connection destination information stored in the storage unit in association with the group identification information acquired by the information acquisition unit. a specific part to
further having
The instruction unit transmits the connection instruction information for instructing the connection destination of the facility communication line of the shared facility to be the connection communication line indicated by the connection destination information specified by the identification unit.
The information processing device according to claim 1 . When the start time of the time period indicated by the facility reservation information comes, the instruction unit changes the facility communication line corresponding to the facility identification information associated with the use period indicated by the facility reservation information to the facility reservation information. transmitting the connection instruction information for connecting to the connection communication line indicated by the corresponding connection destination information to the switching device;
The information processing apparatus according to claim 1 or 2. When the end time of the time period indicated by the facility reservation information comes, the instruction unit connects a network line corresponding to the facility identification information associated with the use period indicated by the facility reservation information and a network line corresponding to the facility reservation information. transmitting disconnection instruction information for disconnecting the connection communication line indicated by the connection destination information to the switching device;
The information processing apparatus according to any one of claims 1 to 3. After transmitting the connection instruction information, the instruction unit transmits display instruction information for displaying the data received from the connection destination to a display device installed in the shared facility.
The information processing apparatus according to any one of claims 1 to 4. The instruction unit transmits the connection instruction information including information necessary for the switching device to establish a connection with the connection destination communication device.
The information processing apparatus according to any one of claims 1 to 4. An information processing method in which a computer manages connection destinations of a plurality of facility communication lines connected to a plurality of shared facilities that can be used by a plurality of people belonging to a plurality of groups,
Facility reservation information indicating the period of use of the shared facility, facility identification information for identifying the shared facility, and a connection communication line connected to a server serving as a connection destination of the shared facility corresponding to the facility identification information a step of associating and storing the indicated connection destination information;
which connection communication line among the plurality of connection communication lines is to be connected to the facility communication line of the shared facility associated with the facility reservation information in the storage unit during the period of use indicated by the facility reservation information; instructing the switching device to switch the connection destination of the facility communication line of the shared facility corresponding to the facility reservation information to the connection communication line indicated by the connection destination information corresponding to the facility reservation information sending connection indication information;
An information processing method comprising: an information processing device that manages connection destinations of a plurality of facility communication lines connected to a plurality of shared facilities that can be used by a plurality of people belonging to a plurality of groups; and the plurality of facility communications under the control of the information processing device. a switching device for switching the connection destination of the line,
The information processing device is
Facility reservation information indicating the period of use of the shared facility, facility identification information for identifying the shared facility, and a connection communication line connected to a server serving as a connection destination of the shared facility corresponding to the facility identification information a storage unit that associates and stores connection destination information indicating
which connection communication line among the plurality of connection communication lines is to be connected to the facility communication line of the shared facility associated with the facility reservation information in the storage unit during the period of use indicated by the facility reservation information; to the switching device for switching between the facilities, to set the connection destination of the facility communication line of the shared facility corresponding to the facility reservation information to the connection communication line indicated by the connection destination information corresponding to the facility reservation information. an instruction unit that transmits connection instruction information to
has
The switching device
a first connection unit connected to the plurality of facility communication lines;
a second connection unit connected to a plurality of connection communication lines provided between the plurality of connection destinations;
the connection instruction information is received, and the facility communication line corresponding to the facility reservation information is selected from the plurality of connection communication lines based on the received connection instruction information. a connection processing unit that connects to a communication line;
An information processing system having

Images