JPH06324993A - Information processing system - Google Patents

Abstract

PURPOSE:To prevent a device from being used illegally by deciding whether or not the use of an interlocked destination device is permitted to an operator from operator identification information read by a medium reading part, and transferring use permission information to the interlocked destination device that is an object when it is permitted. CONSTITUTION:Interlocked destination devices 9-1 to 9-n whose usage are permitted are decided for the operators of managing side devices 6a, 6b equipped with medium reading parts 4a, 4b in advance. When the operator desires to operate the devices 9, the reading parts 4a, 4b read operator identification media 5a, 5b at first. Read operator identification information are sent to operator identifying parts 7a, 7b, and it is decided whether or not the operators can use the devices 9, and when it is decided that they can use the devices, an information transmission part 8 sends the use permission information to the devices 9. While, when it is decided that the device cannot be used by the operators, the devices 9 are disabled to be transferred in a possible state. Thereby, it is possible to specify the operator even when the devices 9 are not provided with the medium reading parts, which prevents terminal equipment from being used illegally.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing system for discriminating whether or not one device can use another device in a plurality of devices connected to a network.

[0002]

2. Description of the Related Art In a financial institution, each business office is equipped with a plurality of terminal devices, which are connected online, and these terminal devices are connected to a host through a terminal controller to perform various business operations. It is being appreciated.

FIG. 2 shows a block diagram of a financial system including such a host and a terminal device. The system shown in the figure includes a host 1, a terminal control device (terminal controller) 2,
It comprises a plurality of terminal devices 3-1 to 3-n. Host 1
A higher-level station that controls the terminal device 3 installed in each sales office,
It has files of all business offices. Terminal control device 2
Is provided in each sales office, and a plurality of terminal devices 3 in the sales office are
It is a control terminal which controls -1 to 3-n. The terminal devices 3-1 and 3-2 are usually terminal devices that perform various transaction processing by a dedicated operator (operator).
The medium reading unit 4 is provided in each of the terminal devices 3-1 and 3-2.

The medium reading unit 4 is a device for reading an operator identification medium (ID card) 5 held by an operator. Further, the operator identification medium 5 is a magnetic card or an IC card in which a number or a symbol (for example, an employee number or the like) that can be identified by the operator is recorded, and the operator identification medium 5 is used as the medium reading unit 4. , The operator identification information is transferred to the terminal devices 3-1 and 3-2, and the terminal devices 3-1 and 3-2 determine whether the operator can use the device. , Permitting its use when it is available. The terminal devices 3-3 to 3-n are personal computers.

[0005]

However, in financial institutions and the like, the terminal devices 3-1 and 3 equipped with the medium reading unit 4 are provided.
-2 is usually specially developed for the operations of financial institutions, and is therefore expensive. On the other hand, in recent years, the performance of personal computers has improved, and it has become possible to use them as substitutes for dedicated machines. Therefore, in financial institutions, personal computer terminal devices 3-3 to 3-
n is used as an alternative machine for the terminal devices 3-1, 3-2 which are dedicated machines.

However, in the personal computer level terminal devices 3-3 to 3-n, since the medium reading unit 4 is not connected, the device using the operator identification medium 5 such as the terminal devices 3-1 and 3-2. There was a problem that it was not possible to take preventive measures against unauthorized use. In addition, since the operator cannot be specified in the terminal devices 3-3 to 3-n as described above, it is necessary to specify an operator such as who performed the work history performed in the terminal devices 3-3 to 3-n. It was not possible to obtain, and only an insufficient work history was obtained.

The present invention has been made in order to solve the above-mentioned conventional problems, and even if a device does not have a means for identifying an operator, it is possible to take fraud prevention measures for the device. An object is to provide an information processing system capable of identifying a device user.

[0008]

An information processing system of the present invention is an information processing system in which a plurality of devices are connected to a network. Based on the medium reading unit for reading the identification information and the operator identification information read by the medium reading unit, whether or not the operator is permitted to use the interlocking device other than the management side device in the plurality of devices And an operator transfer unit that transfers the use permission information to the linked device when the operator is allowed to use the linked device by the operator identifying unit It is characterized by having and.

[0009]

In the information processing system of the present invention, the operator of the device on the management side having the medium reading unit determines in advance which interlocking device the use of which is permitted. When the operator tries to operate the interlocking destination device, the operator first causes the medium reading unit to read the operator identification medium. Thereby, the medium reading unit reads the operator identification information and sends it to the operator identification unit. The operator identification unit determines from the operator identification information received from the medium reading unit whether or not the operator is an operator who can use the interlocking destination device, and the determination result indicates that the operator can be used. If it is, the information transfer unit transfers the use permission information to the link destination device.

On the other hand, as a result of the operator determination processing by the operator identification unit, if the operator is not a usable operator, the use permission information is not sent, so that the linked apparatus does not shift to the usable state. By such an operation, even if the linked device does not have a medium reading unit or the like, it is possible to identify the operator and prevent unauthorized use of the terminal device.

[0011]

Embodiments of the present invention will now be described in detail with reference to the drawings. FIG. 1 is a block diagram showing an embodiment of an information processing system of the present invention. The illustrated apparatus includes a host 1, a terminal control device 2, management side devices 6a and 6b, and interlocking destination devices 9-1 to 9-1.
9-n.

As in the conventional case, the host 1 has the management side devices 6a and 6b and the interlocking destination device 9-1 provided in each sales office.
9-n is a higher-level station for controlling all the terminal devices, and the terminal control device 2 includes the devices 6a and 6b in the sales office,
It is a control terminal for controlling 9-1 to 9-n and communicating with the host 1. The management-side devices 6a and 6b are dedicated terminals for various transaction processes, and terminal devices often have dedicated operators. Further, these management side devices 6a and 6b are provided with medium reading units 4a and 4b, respectively, and are also provided with operator identification units 7a and 7b and information transfer units 8a and 8b, which are characteristic points of this embodiment. There is.

The medium reading units 4a and 4b are devices similar to the conventional medium reading unit 4, and are devices for reading the operator identification media 5a and 5b inserted by the operator. The operator identification media 5a and 5b are magnetic cards or IC cards, like the conventional operator identification media 5, and the operator identification information is stored in a magnetic stripe or a memory. The operator identification units 7a and 7b are
It has a function of identifying whether or not the operator is permitted to use a specific terminal device, based on the operator identification information read by the medium reading units 4a and 4b. In this embodiment, the specific device that can be operated from the management-side device 6a is the linkage destination device 9-1, and the linkage destination terminal device of the management-side device 6b is the linkage destination device 9-2.

The information transfer units 8a and 8b are the operator identification unit 7
When it is confirmed in a and 7b that the operator is permitted to use the interlocking destination devices 9-1 and 9-2, the permission information is set to the interlocking destination device 9-1 and the interlocking destination device 9 respectively. -2
It has the function of transferring to and.

The interlocking devices 9-1 to 9-n are general-purpose machines each made up of a personal computer, and do not have the medium reading units 4a and 4b unlike the management side devices 6a and 6b, and are The management side devices 6a and 6b and the terminal control device 2 are online connected by a network 10 such as a local area network. Further, there is no dedicated operator in these interlocking destination devices 9-1 to 9-n, and as described above, the operator of the management-side device 6a sets the interlocking destination device 9-1 in the management-side device 6b. The operator operates the interlocking destination device 9-2 at any time.

Next, the operation of the information processing system having the above configuration will be described. FIG. 3 is a flow chart for explaining the operation. First, the operator puts the management side devices 6a and 6b into an operable state in order to execute the work (step S1). Since the medium reading unit 4a to information transfer unit 8a and the medium reading unit 4b to information transfer unit 8b operate in exactly the same manner, the following description will simply refer to the medium reading unit 4 to information transfer unit 8.

The process of step S1 is a process for starting up the management-side device 6, which is performed as follows. That is, when trying to start up the management-side device 6, first, a setting screen such as a date is displayed on a display (not shown), and when the date is set, a reading screen of the operator identification medium 5 is displayed. As a result, the operator causes the medium reading unit 4 to read his / her operator identification medium 5, and further inputs the personal identification number of the operator from a keyboard (not shown) to start up the management-side device 6. Incidentally, these operations are known.

By such a start-up process, the management-side device 6 is operated, and various transaction processes are performed by a dedicated operator. Then, when it is necessary to use the interlocking destination devices 9-1 to 9-n during the operation of the management-side device 6, for example, in consultation work, the operator operates as follows. In addition, in each of the interlocking destination devices 9-1 to 9-n,
As described below.

First, the reading screen of the operator identification medium is displayed on the management side device 6 (step S2). FIG. 4 is an explanatory diagram showing this screen. The screen in the figure is an ID card reading screen, and there are items such as an ID number, an authentication number, and a terminal number on this screen. Where I
The D number is a number given to each operator in the read information when the operator identification medium 5 is read, and when the operator identification medium 5 is read, this ID number is automatically set. Is displayed. The authentication number is a personal identification number entered by the operator, and even if it is entered, it is displayed as "*" on the display. Further, the linked devices 9-1 to 9-n each have a terminal number so that they can be identified, and the terminal number on the screen means this number.

When the ID card reading screen is displayed in step S2, the operator inputs the terminal identification number of the interlocking destination device 9 or the keyword for terminal identification. As a result, the operator identification unit 7 of the management-side device 6 recognizes that the interlocking destination device 9 is read, and automatically displays the input terminal number and the like on the display (step S3). still,
In the present embodiment, the operator of the management-side device 6a operates the interlocking device 9
-1, the operator of the management-side device 6b determines the interlocking destination such as the interlocking destination device 9-2. However, if there are a plurality of interlocking destinations in advance, one of the interlocking destination devices 9-1 to 9-9 -N can be selected. Then, the operator inserts the operator identification medium 5 into the medium reading unit 4, and the medium reading unit 4 reads the operator information from the operator identification medium 5 in the same manner as when the management-side apparatus 6 is started up (step S4).

When the operator identification information is read by the medium reading unit 4, the operator identification unit 7 refers to an operator identification table (not shown) as operator identification processing (steps S5 and S6), and this operator is identified. Determines whether or not the use of the linked device 9 specified in step S3 is permitted, and if the operator is permitted to use, the operator is prompted to input the personal identification number. Thus, when the operator inputs the personal identification number, the operator identifying unit 7 determines whether the personal identification number is correct, and if it is correct, the process proceeds to the next step. On the other hand, in steps S5 and S6, if the operator is not the person who is permitted to use the interlocking destination device 9 or the entered personal identification numbers do not match, an error message to that effect is displayed. (Step S8), the operating state of the management-side device 6 is returned to.

When it is recognized in step S6 that the operator is permitted to use the interlocking destination device 9,
The management-side device 6 prompts the operator to transmit the permission information to the interlocking destination device 9, and when the operator presses a transmission key or the like, the information transfer unit 8 handles the permission information. The data is transferred to the linked device 9 (step S7). As a result, the interlocking destination device 9 becomes operable. During this information transfer, the interlocking destination device 9 keeps the power supply of the device on so that it can receive the information.

After that, the operator leaves the management-side device 6 to use the interlocking device 9, so that the management-side device 6 cannot be operated (step S9). Specifically, the operation is in a state where the user cannot operate unless the leaving key is pressed to perform the startup process of step S1.

Then, the operator operates the interlocking destination device 9, and when the operation of the interlocking destination device 9 ends, the operator presses the leave key of the interlocking destination device 9. As a result, the link destination device 9 becomes inoperable (step S10). Then, when all the operations are to be ended, the work is ended as it is, and when the work is to be performed by the management-side device 6 again, step S1
Then, the operator identification process of the management-side device 6 is performed (step S11).

In the above embodiment, the information transfer units 8a, 8
Although the operator permission information is directly transferred from the device b to the interlocking destination devices 9-1 to 9-n, the operator permission information is temporarily transferred to the terminal control device 2 or the host 1, and these terminal control device 2 or the host 1 are transmitted.
It may be configured to transmit from. Further, the operator identification units 7a and 7b and the information transfer units 8a and 8b themselves are provided in the terminal control device 2 or the host 1, and the medium reading unit 4a,
The operator identification information read by 4b may be sent to these devices and the same operator identification processing as the management side devices 6a and 6b may be performed.

Further, in the above embodiment, an example of a terminal device in a branch office of a financial institution was described as an information processing system, but the present invention is not limited to this, and a plurality of devices are connected by the network 10. With the configuration, the same effect as that of the above-described embodiment can be obtained. Note that the network 10 is not limited to the local area network, but may be any network configuration as long as the management-side device 6 and the interlocking destination device 9 are connected by a cable or the like and data can be transferred between these devices. It may be. Further, the operator identification mediums 5a and 5b are not limited to ID cards and the like, and may be those that store operator identification information and can read the operator identification information by the medium reading units 4a and 4b. However, other configurations may be used.

[0027]

As described above, according to the information processing system of the present invention, the medium reading section is provided in the management side apparatus among the plurality of apparatuses connected by the network, and the operation read by the medium reading section is provided. Based on the person identification information, it is determined whether the operator is permitted to use the interlocking destination device, and if the operator is permitted, the use permission information is transferred to the target interlocking device. Even if the linked device does not have a means for identifying the operator, it is possible to prevent unauthorized use of the device, and since the operator can be specified, it is possible to confirm the reliability of the work history of the linked device. You can get a high price.

[Brief description of drawings]

FIG. 1 is a block diagram of an information processing system of the present invention.

FIG. 2 is a block diagram of a conventional information processing system.

FIG. 3 is an operation flowchart of the information processing system of the present invention.

FIG. 4 is a diagram showing a reading screen of an operator identification medium in the information processing system of the present invention.

[Explanation of symbols]

 1 host 2 terminal control device 4a, 4b medium reading unit 5a, 5b operator identification medium 6a, 6b terminal device 7a, 7b operator identification unit 8a, 8b information transfer unit 9-1 to 9-n interlocking device 10 network

Claims (1)

[Claims] 1. An information processing system in which a plurality of devices are connected to a network, and a medium reading unit which is provided in a management side device in the plurality of devices and which reads operator identification information from an operator identification medium, An operator identification unit for identifying whether or not the operator is permitted to use a linked device other than the management-side device in the plurality of devices from the operator identification information read by the medium reading unit; An information processing system comprising: an information transfer unit that transfers the use permission information to the interlocking destination device when the operator identification unit is an operator who is permitted to use the interlocking destination device. .