WO2015037175A1 - Confidential-information display control system, server, confidential-information display control method, and recording medium - Google Patents

Abstract

This invention discloses a server and the like for controlling display such that, when implementing display restrictions for confidential information on a terminal in a public space, said confidential information is not leaked to guests, and to the extent possible, the terminal's user is not impeded from working on the terminal. A user-information reception unit (13) in this server (1) receives, from a terminal (10), user information that indicates whether or not a user is currently using said terminal and whether or not confidential information that is set to be treated confidentially is being displayed. A guest-information reception unit (11) receives, from a sensor (3), guest information that indicates the position of a guest. On the basis of said guest information, a perception-region computation unit (14) computes a perception region for the guest. On the basis of perception-region information indicating said perception region, the user information, and terminal information indicating the position of the terminal, a risk-level determination unit (15) determines a risk level for the terminal (10). A control-information transmission unit (16) transmits, to the terminal (10), control information indicating a control technique, corresponding to the aforementioned risk level, for controlling the display of the abovementioned confidential information.

Description

Secret information display control system, server, secret information display control method, and recording medium

The present invention relates to a technique for controlling display of secret information representing a secret whose handling should be limited.

In order to create new ideas that are not confined to the field, an increasing number of offices have open conference areas that promote collaboration between departments (organizations). On the other hand, open collaboration is becoming more important, so there are more opportunities for outside guests to visit the office. For this reason, people who have not directly signed a confidentiality agreement are often in the same place, and handling of confidential information becomes a problem.

Patent Document 1 discloses a secret information protection system. The confidential information protection system, such as “confidential” or “confidential” included in the file displayed on the client terminal located near the outsider when an outsider enters the office The risk is calculated based on the character string. Then, the secret information protection system performs display control of the screen of the client terminal in order to ensure security when the obtained degree of risk exceeds the security level allowed for the resident. The display control performed by the secret information protection system includes display of alert information on the screen, display (activation) of a screen saver, deletion or minimization of a specific window, or filling with a predetermined color.

Patent Document 2 discloses a data processing apparatus. The data processing device manages the visit of the guest in the office, detects the presence position of the person who should accept the guest in the office where the free address is adopted, and detects the guest Presented seating position. The technology described in Patent Document 2 restricts the display of user portable terminals existing in the vicinity of the guest in response to detecting that the guest has approached an employee in an office where a free address or the like is employed. By doing so, leakage of confidential information is prevented.

Patent Document 3 discloses a display system that simultaneously displays a plurality of images from which different images can be viewed from different viewing areas. This display system determines display conditions according to the security level set for the visual recognition area, and restricts images to be output according to the determined display conditions.

Patent Document 4 discloses an information management apparatus that performs entrance / exit management and display control on a projector. When the information management apparatus performs information protection in a plurality of facility areas, the information management apparatus is adjacent to a person's protection attribute existing in a certain facility area based on the position information and protection attribute of the person and the protection attribute of the protection target information. Refers to the protection attributes of people present in the facility area. Then, the information management apparatus determines the protection level of the facility area based on the reference result, and performs control (entrance / exit management and display control to the projector) for information protection.

Patent Document 5 discloses an action monitoring system that identifies an individual by a face image and issues a warning when an action prohibited by each individual is detected.
Patent Document 6 discloses an apparatus for managing entry / exit of a target (person) to / from a specific area. This apparatus detects an orientation and a moving speed of the face with respect to the target using an image input from a photographing unit such as a camera, and sets an influence area by the target based on the detection result. And this apparatus outputs the warning of the warning level according to the movement state of the said object with respect to the said specific area based on the set influence area and the overlapping (superimposition) degree with the said specific area.

JP 2009-116512 A JP 2009-086897 A Japanese Patent No. 4382837 Japanese Patent No. 4788636 International Publication No. 2009/025140 JP 2010-122978 A

When a guest from outside the company visits, an internal user who uses a terminal in the vicinity of the guest must avoid sharing the confidential information with the guest. However, if too much importance is given to the guest not knowing the secret information, the user's work will be hindered. Therefore, it is desired to perform display control that protects confidential information and prevents the user's work as much as possible.

The technologies disclosed in Patent Document 1 and Patent Document 2 change or limit the display of all terminals existing near the guest who has entered the room. For this reason, there is an adverse effect that operations are excessively limited for a user of a terminal that is not viewed by the guest.

As described in Patent Documents 3 to 6, there are a coping method assuming an area where a guest is present, a method of coping by restricting entry to the guest, and a method of coping by issuing a warning to the guest. It's not an open environment.

The present invention has been made in view of the above circumstances. In the present invention, when restricting the display of confidential information by a terminal in an open environment, the display control is performed so that the confidential information is not leaked to the guest and the work of the user of the terminal is prevented as much as possible. Objective.

The secret information display control system according to the first aspect of the present invention includes:
A secret information display control system including a terminal that displays secret information set to be handled secretly, a sensor that detects the position of a guest, and a server that is communicably connected to the terminal and the sensor via a network Because
The terminal transmits user information indicating whether or not a user is using the terminal and whether or not the secret information is displayed to the server,
The sensor transmits guest information indicating the detected position of the guest to the server,
The server
User information receiving means for receiving the user information from the terminal;
Guest information receiving means for receiving the guest information from the sensor;
Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk;
Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
With
The terminal controls display of the secret information based on the control information received from the server.

The server according to the second aspect of the present invention is:
A server that is communicably connected via a network to a terminal that displays secret information set to be handled secretly and a sensor that detects the location of the guest,
User information receiving means for receiving user information indicating whether or not the user using the terminal is present from the terminal and whether or not the secret information is displayed;
Guest information receiving means for receiving guest information indicating the position of the guest detected from the sensor;
Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk;
Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
Is provided.

The secret information display control method according to the third aspect of the present invention includes:
A terminal that displays secret information set to be handled secretly transmits user information indicating whether or not the user using the terminal is present and whether or not the secret information is displayed to the server,
A sensor that detects the position of a guest that is a secret target of the secret information transmits guest information indicating the detected position of the guest to the server,
The server is
Receiving the user information from the terminal;
Receiving the guest information from the sensor;
When receiving the guest information, based on the guest information, calculate the recognition area of the guest, generate recognition area information indicating the calculated recognition area,
Based on the recognition area information, the user information, and terminal information indicating the position of the terminal, the risk level of the terminal is determined, and risk level information indicating the determined risk level is generated,
Control information indicating a control method for controlling display of the secret information corresponding to the risk level of the terminal indicated by the risk level information is transmitted to the terminal;
The terminal controls display of the secret information based on the control information received from the server.

A program according to the fourth aspect of the present invention, or a computer-readable recording medium storing the program,
A computer that is communicably connected via a network to a terminal that displays secret information that is set to be handled secretly and a sensor that detects the location of the guest,
User information receiving means for receiving from the terminal user information indicating whether or not the user is using the terminal and whether or not the secret information is displayed;
Guest information receiving means for receiving guest information indicating the detected position of the guest from the sensor;
Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk; and
Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
To function as.

According to the present invention, when restricting display of secret information by a terminal in an open environment, display control is performed so that secret information is not leaked to a guest and work by the user of the terminal is prevented as much as possible. it can.

FIG. 1 is a diagram showing a configuration example of a secret information display control system according to the first embodiment of the present invention. FIG. 2 is a block diagram illustrating a functional configuration example of the server according to the first embodiment. FIG. 3 is a diagram illustrating an example of control information according to the first embodiment. FIG. 4 is a diagram for explaining the operation accompanying the movement of the guest in the secret information display control system according to the first embodiment. FIG. 5 is a flowchart illustrating an example of the secret information display control process according to the first embodiment. FIG. 6 is a diagram illustrating a configuration example of a secret information display control system according to the second embodiment of the present invention. FIG. 7 is a block diagram illustrating a functional configuration example of the server according to the second embodiment. FIG. 8 is a flowchart illustrating an example of the secret information display control process according to the second embodiment. FIG. 9 is a block diagram showing a hardware configuration example of the server according to each embodiment of the present invention.

Embodiments of the present invention will be described in detail with reference to the drawings. In the following description, the same components are denoted by the same reference numerals in the drawings, and redundant descriptions are omitted.

In the present embodiment, “secret information” is information that should be handled as “secret”, the scope of disclosure being limited to specific parties (members), and in each embodiment described below, It is information set so as to be discriminated as “secret information” in the apparatus. “Public information” is information other than the confidential information. A “user” is an insider (Insider) who performs work (business) using at least one of confidential information and public information displayed on a terminal (client terminal). “Guest” is an outsider who must not know confidential information.

(First embodiment)
FIG. 1 is a diagram showing a configuration example of a secret information display control system according to the first embodiment of the present invention. The secret information display control system 100 includes a server 1, a sensor 3 (3A to 3D), and a terminal 10. It is assumed that the sensor 3 and the terminal 10 and the server 1 are communicably connected via a communication network (not shown).

In the configuration example shown in FIG. 1, four sensors (sensor 3A to sensor 3D) are provided, and the sensor 3 has functions such as an IC (Integrated Circuit) tag reader and a camera. The sensor 3 (sensor 3A to sensor 3D) detects the position of the guest based on the detection result of the IC tag 51 possessed by the guest by the IC tag reader function. The sensor 3 can detect the time-series movement (movement, movement locus) of the guest by repeating this position detection. Further, the sensor 3 captures the guest by the camera function, and detects the direction of the guest's line of sight based on the captured image. The sensor 3 generates information indicating the detected movement or line of sight of the guest (hereinafter referred to as “guest information GI”), and transmits the generated guest information GI to the server 1.

Sensor 3 may transmit guest information GI periodically, or may transmit new guest information GI only when guest information GI changes.

In the configuration example shown in FIG. 1, nine terminals 10 (terminals 10A to 10I) are provided, and whether or not there is a user who operates the terminal and whether or not secret information is displayed on the display screen of the terminal. And the like.

The terminal 10 determines whether or not the information handled by the terminal 10 is handled as confidential information according to the relationship with the guest as described below.

For example, the sensor 3 acquires guest attribute information GA indicating an attribute of the guest from the IC tag 51 possessed by the guest. The guest attribute information GA includes at least information indicating a field that can be disclosed and information indicating a level that can be disclosed as attributes relating to the target guest. It is assumed that a field and a level are set in the information displayed on the terminal 10. In such a case, it is assumed that the terminal 10 receives the guest attribute information GA from the sensor 3. In this case, if the information displayed on the terminal 10 is within the range of information included in the guest attribute information GA (that is, within the range of guest attributes), the terminal 10 displays the displayed information. It is determined that the information is public information. On the other hand, if it is not in the range of the information included in the guest attribute information GA (that is, outside the range of the guest attribute), the terminal 10 determines that the information displayed on the terminal 10 is confidential information. When there are a plurality of guests at the same time, the terminal 10 determines whether or not the terminal itself displays secret information based on the guest attribute information GA regarding each guest.

The terminal 10 generates user information indicating whether the user exists or whether secret information is displayed, and transmits the generated user information to the server 1. The terminal 10 may transmit this user information periodically or only when the user information changes. Whether the user exists or not may be determined by, for example, the terminal 10 having an IC tag reader (not shown) and detecting the IC tag 51 possessed by the user by the IC tag reader. In addition, for example, when the terminal 10 includes a camera, the presence / absence of the user may be determined by a recognition process related to an image captured by the camera.

As another means for determining whether or not the terminal 10 displays confidential information, for example, the sensor 3 transmits guest attribute information GA to the server 1, and the terminal 10 displays the information displayed by the terminal 10. Setting information (for example, information indicating the field and level) is transmitted to the server 1. And the server 1 may determine whether the terminal 10 is displaying the secret information based on these information received from the sensor 3 and the terminal 10.

The server 1 calculates an area where the guest can be recognized (hereinafter referred to as “recognition area”) based on the guest information GI received from the sensor 3. Further, the server 1 determines the risk level of each terminal 10 based on the calculated recognition area, user information received from the terminal 10, and the like. The server 1 controls the display state of the secret information on each terminal 10 according to each risk level.

The example of FIG. 1 represents a situation where the user uses the terminals 10A, 10B, 10E, 10F, and 10G in an environment where nine terminals 10 (terminal 10A to terminal 10I) are arranged. In the situation shown in FIG. 1, the four sensors 3 (sensors 3A to 3D) detect the movement of the guest who entered the room, the line of sight, and the like.

In the example shown in FIG. 1, the guest recognition area is represented by a broken line. In this example, the terminal 10A and the terminal 10B exist in the guest recognition area, and secret information is displayed on these terminals. For this reason, the server 1 performs display control of secret information displayed on the terminal 10A and the terminal 10B.

FIG. 2 is a block diagram illustrating a functional configuration of the server according to the first embodiment. The server 1 includes a guest information reception unit 11, a storage unit 12, a user information reception unit 13, a recognition area calculation unit 14, a risk determination unit 15, and a control information transmission unit 16.

The guest information receiving unit 11 receives guest information GI from the sensors 3A to 3D. The guest information receiving unit 11 stores the received guest information GI in the storage unit 12.

User information receiving unit 13 receives user information from terminals 10A to 10I. The user information receiving unit 13 stores the received user information in the storage unit 12.

In the present embodiment, it is assumed that the storage unit 12 stores in advance terminal information indicating the position of each terminal 10 and control information indicating a control method for controlling display of secret information.

When the guest information reception unit 11 receives the guest information GI, the recognition region calculation unit 14 calculates the recognition region of the guest based on the guest information GI stored in the storage unit 12. The recognition region calculation unit 14 generates recognition region information indicating the calculated recognition region, and sends the generated recognition region information to the risk determination unit 15. For example, the recognition area calculation unit 14 calculates a fan-shaped recognition area centered on the guest's position and having a radius of a certain distance in the direction the guest is facing. At this time, the recognition area calculation unit 14 may set the level to a recognizable level according to the distance from the guest.

Also, the recognition area calculation unit 14 may change the recognition area according to the level of security. For example, the recognition area calculation unit 14 uses a calculation formula that widens the recognition area in an environment with a high security level, and uses a calculation formula that narrows the recognition area in an environment with a low security level.

Based on the recognition area information received from the recognition area calculation unit 14, the user information stored in the storage unit 12, and the terminal information stored in advance in the storage unit 12, the risk determination unit 15 The risk level of the terminal 10 is determined. The risk determination unit 15 determines the risk according to whether secret information is displayed, whether a user exists, and whether the terminal 10 is included in the guest's recognition area. To do. The risk determination unit 15 generates risk information indicating the determined risk of each terminal 10, and sends the generated risk information to the control information transmission unit 16.

When the recognition area calculation unit 14 calculates the recognition area by setting the level to the recognizable level according to the distance from the guest, the risk level determination unit 15 determines the risk level in consideration of the set recognizable level. judge.

When the control information transmission unit 16 receives the risk level information from the risk level determination unit 15, the control information transmission unit 16 calls the control information stored in advance in the storage unit 12 and performs control corresponding to the risk level of each terminal 10 indicated by the risk level information. Information is transmitted to the corresponding terminal 10.

Each terminal 10 controls the display of the secret information by the control method indicated by the control information received from the control information transmitting unit 16.

Here, how to control the display of confidential information will be specifically described with reference to FIGS. 1, 3, and 4. FIG.

FIG. 3 is a diagram illustrating an example of control information according to the first embodiment. As illustrated in FIG. 3, the storage unit 12 stores control information associated with the degree of risk.

In the example shown in FIG. 3, control information “cancel confidential information display control” is associated with the risk level 0. Control information “move the position of the secret information in the opposite direction of the guest” is associated with the risk level 1. Control information “reducing the display of secret information to a predetermined size” is associated with risk level 2. The risk level 3 is associated with control information “forcibly terminate display of secret information”.

The control method for controlling the display of the secret information is not limited to the example described above. For example, a technique for displaying a message for calling attention, a technique for displaying a screen saver, or a technique for minimizing a window displaying secret information may be used. Moreover, the control information transmitted to each terminal 10 is not limited to one, and a plurality of control information may be transmitted as control candidates, and the user may select from among the control information. Further, when the risk determination unit 15 determines the risk considering the recognizable level, the terminal 10 sets the character size of the secret information to a size that the guest cannot recognize, for example, according to the recognizable level. It is good to perform control such as changing.

When there is a guest at the position shown in FIG. 1, the position of the guest and the direction of the line of sight are detected by the sensors 3A to 3D. The sensors 3A to 3D transmit guest information GI indicating the position of the guest and the direction of the line of sight to the server 1.

The guest information receiving unit 11 of the server 1 stores the guest information GI received from the sensors 3A to 3D in the storage unit 12.

The terminals 10A to 10I transmit user information to the server 1. The user information receiving unit 13 of the server 1 stores the user information received from the terminals 10A to 10I in the storage unit 12.

In the example illustrated in FIG. 1, the user information stored in the storage unit 12 includes, for example, the following items. That is,
The terminal 10A displays secret information in the absence of a user,
-Secret information is displayed on the terminal 10B, the terminal 10F, and the terminal 10G in a state where the user exists,
-Terminal 10C, terminal 10D, terminal 10H and terminal 10I are powered off,
-Public information is displayed on the terminal 10E in a state where the user exists.

When the guest information reception unit 11 receives the guest information GI, the recognition region calculation unit 14 calculates the recognition region of the guest based on the guest information GI stored in the storage unit 12. As described above, in the example shown in FIG. 1, the area indicated by the broken line is the guest recognition area. The recognition region calculation unit 14 generates recognition region information indicating the calculated recognition region, and sends the generated recognition region information to the risk determination unit 15.

The risk determination unit 15 determines each terminal based on the recognition area information received from the recognition area calculation unit 14, the user information stored in the storage unit 12, and the terminal information stored in the storage unit 12 in advance. A risk rating of 10 is determined. For example, as illustrated in FIG. 3, the risk determination unit 15 determines the risk of each terminal 10 in four levels (levels 0 to 3).

In the example shown in FIG. 1, the terminal 10A and the terminal 10B exist in the guest recognition area. Since the secret information is displayed on the terminal 10A in the absence of the user, the risk determination unit 15 determines the risk of the terminal 10A to be level 3. Since the secret information is displayed on the terminal 10B in a state where the user exists, the risk determination unit 15 determines the risk of the terminal 10B as level 2. Other terminals 10 do not exist within the guest's recognition area. Therefore, the risk determination unit 15 determines the risk of the other terminal 10 as level 0. The risk determination unit 15 generates risk information that associates information for identifying each terminal 10 with the risk determined for each terminal, and sends the generated risk information to the control information transmission unit 16.

Since the risk level of the terminal 10A indicated by the risk level information received from the risk level determination unit 15 is level 3, the control information transmission unit 16 transmits control information that can be instructed to forcibly end the display of the secret information to the terminal Send to 10A.

Since the risk level of the terminal 10B indicated by the risk level information received from the risk level determination unit 15 is level 2, the control information transmission unit 16 can instruct control information to be reduced to a predetermined size. Is transmitted to the terminal 10B.

The control information transmitting unit 16 transmits control information that can be instructed to cancel the display control of the secret information to the other terminals 10 because the risk level is level 0.

When receiving the control information from the control information transmitting unit 16, the terminal 10A forcibly terminates the display of the secret information accordingly. When receiving the control information from the control information transmitting unit 16, the terminal 10B reduces the display of the secret information to a predetermined size according to the control information. When receiving the control information from the control information transmitting unit 16, the other terminal 10 cancels the display control of the secret information when the display control of the secret information is being performed.
FIG. 4 is a diagram for explaining the operation accompanying the movement of the guest in the secret information display control system according to the first embodiment. When the guest moves to the position shown in FIG. 4 from the situation described above with reference to FIG. 1, the position of the guest and the direction of the line of sight are detected by the sensors 3A to 3D. The sensors 3A to 3D transmit guest information GI indicating the detected position of the guest and the direction of the line of sight to the server 1.

The guest information receiving unit 11 of the server 1 stores the guest information GI received from the sensors 3A to 3D in the storage unit 12.

The terminals 10A to 10I determine whether or not the user exists and whether or not secret information is displayed, and transmit the user information to the server 1.

The user information receiving unit 13 of the server 1 stores the user information received from the terminals 10A to 10I in the storage unit 12. In the example illustrated in FIG. 4, at least the following items are stored in the storage unit 12 as user information. That is,
-Secret information is displayed on the terminal 10B, the terminal 10F, and the terminal 10G in a state where the user exists,
-Terminal 10A, terminal 10C, terminal 10D, terminal 10H and terminal 10I are powered off,
-Public information is displayed on the terminal 10E in a state where the user exists.

When the guest information reception unit 11 receives the guest information GI, the recognition region calculation unit 14 calculates the recognition region of the guest based on the guest information GI stored in the storage unit 12. Also in FIG. 4, the area indicated by a broken line represents a guest recognition area. The recognition region calculation unit 14 generates recognition region information indicating the calculated recognition region, and sends the generated recognition region information to the risk determination unit 15.

In the example shown in FIG. 4, the terminal 10E and the terminal 10F exist in the guest recognition area. Since the public information is displayed on the terminal 10E in the presence of the user, the risk determination unit 15 sets the risk of the terminal 10E to level 0. Since the confidential information is displayed on the terminal 10F in the presence of the user, the risk determination unit 15 sets the risk of the terminal 10F to level 2. Since the other terminals 10 do not exist within the guest's recognition area, the risk level of these terminals is set to level 0. The risk level determination unit 15 generates risk level information that associates the information for identifying each terminal 10 with the determined risk level, and sends the generated risk level information to the control information transmission unit 16.

Since the risk level of the terminal 10E indicated by the risk level information received from the risk level determination unit 15 is level 0, the control information transmission unit 16 transmits control information that can be instructed to cancel the display control of the secret information to the terminal To 10E.

Since the risk level of the terminal 10F indicated by the risk level information received from the risk level determination unit 15 is level 2, the control information transmission unit 16 can instruct to reduce the display of the secret information to a predetermined size. Is transmitted to the terminal 10F.

The control information transmission unit 16 transmits control information that can be instructed to cancel the display control of the secret information to the other terminals 10 because the risk level is level 0.

Even if the terminal 10E receives the control information from the control information transmission unit 16, the terminal 10E does not perform the display control of the secret information, and therefore does not perform the control to change the display mode. When receiving the control information from the control information transmitting unit 16, the terminal 10F reduces the display of the secret information to a predetermined size according to the control information.

The terminal 10B performs display control of secret information in the situation shown in FIG. For this reason, when the guest 10 moves to the situation shown in FIG. 4, the terminal 10 </ b> B releases the secret information display control in response to receiving the control information from the control information transmitting unit 16, thereby Return to the original display state. When the other terminal 10 also receives the control information from the control information transmission unit 16, if the display control of the secret information has been performed before that, the display control of the secret information is released.

FIG. 5 is a flowchart illustrating a processing procedure in the confidential information display control processing according to the first embodiment. A series of processing described in the flowchart illustrated in FIG. 5 is started in response to, for example, powering on the server 1.

If the guest information GI is not received from the sensor 3 (NO in step S11), the guest information receiving unit 11 waits for reception of the guest information GI by repeating step S11. When the guest information receiving unit 11 receives the guest information GI from the sensor 3 (YES in step S11), the guest information receiving unit 11 stores the received guest information GI in the storage unit 12.

When the guest information reception unit 11 receives the guest information GI (YES in step S11), the recognition region calculation unit 14 calculates the recognition region of the guest based on the guest information GI stored in the storage unit 12. (Step S12). The recognition region calculation unit 14 generates recognition region information indicating the calculated recognition region, and sends the generated recognition region information to the risk determination unit 15.

Based on the recognition area information received from the recognition area calculation unit 14, the user information stored in the storage unit 12, and the terminal information stored in advance in the storage unit 12, the risk determination unit 15 A risk level of 10 is determined (step S13). The risk determination unit 15 generates risk level information indicating the determined risk level, and sends the generated risk level information to the control information transmission unit 16.

When the control information transmission unit 16 receives the risk information from the risk determination unit 15, the control information transmission unit 16 refers to the control information stored in advance in the storage unit 12. Thereby, the control information transmitting unit 16 controls the control information corresponding to the risk (level) of each terminal 10 indicated by the risk information (that is, the control information associated with the risk in the table illustrated in FIG. 3). Content) is transmitted to the terminal 10 (step S14).

If server 1 is not powered off (NO in step S15), server 1 returns the process to step S11 and repeats steps S11 to S15. If server 1 is powered off (YES in step S15), the process ends.

As described above, according to the secret information display control system 100 according to the first embodiment, the following effects can be enjoyed.

That is, the secret information display control system 100 considers the range that can be recognized by the guest with respect to the terminal being used by the user when restricting the display of the secret information of the terminal in the open environment. It is possible to perform display control in which confidential information is not leaked and the work of the user of the terminal is prevented as much as possible.

Moreover, the secret information display control system 100 can also be configured to transmit a plurality of control information as control candidates and to be selected by the user. In the case of this configuration, in the secret information display control system 100, the user of each terminal 10 can select the minimum countermeasure with his / her own intention from the options provided by the system when the guest visits. Therefore, compared with a configuration in which the system automatically and forcibly changes the display mode, it is excellent in convenience because it is not subject to excessive restrictions.

(Second Embodiment)
Next, a second embodiment based on the above-described first embodiment will be described. In the following description, the characteristic part according to the present embodiment will be mainly described. At this time, the same reference numerals are assigned to the same configurations as those in the first embodiment described above, and the duplicate description is omitted. The secret information display control system 200 described in the present embodiment can change the recognition area of the guest by presenting information that can attract the guest's attention.

FIG. 6 is a diagram showing a configuration example of a secret information display control system according to the second embodiment of the present invention. The secret information display control system 200 of the second embodiment includes a display 8 that displays an image in addition to the secret information display control system 100 of the first embodiment. The display 8 may output not only images but also sounds.

The server 1 is communicably connected to the display 8 via a network, and can control the display 8 to display information that can attract the guest's attention. The information that can attract the guest's attention is, for example, information indicating the name of the guest, information regarding the purpose of the guest visiting, and the like. The other configuration of the secret information display control system 200 is the same as that of the secret information display control system 100 described above in the first embodiment.

FIG. 7 is a block diagram illustrating a functional configuration example of the server according to the second embodiment. The server 1 of the second embodiment is similar to the server 1 of the first embodiment in that the guest information receiving unit 11, the storage unit 12, the user information receiving unit 13, the recognition area calculating unit 14, and the risk determining unit 15 and a control information transmission unit 16.

It is assumed that the storage unit 12 stores in advance display information to be displayed on the display 8 in order to draw the guest's attention in addition to the guest information GI, user information, terminal information, and control information. Display information may be acquired from the outside. For example, by using the sensor 3, it may be acquired from the IC tag 51 possessed by the guest and transmitted to the server 1 together with the guest information GI.

When the control information transmission unit 16 receives the risk level information from the risk level determination unit 15, the control information transmission unit 16 determines whether the display information has been transmitted to the display 8. When display information is not transmitted to the display 8, the control information transmission unit 16 determines whether there is a terminal 10 having a degree of risk exceeding a predetermined threshold. When there is a terminal 10 whose degree of risk exceeds a predetermined threshold, the control information transmission unit 16 transmits display information stored in advance in the storage unit 12 to the display 8 and controls the display 8 to display the display information. To do. For example, the control information transmission unit 16 calls (reads) display information corresponding to the guest attribute indicated by the guest attribute information GA from the storage unit 12.

At this time, when the display information is displayed on the display 8, the recognition area may change as the guest turns to the display 8 by noticing the display information. If the recognition area changes, the risk determined by the risk determination unit 15 may be reduced. Therefore, in the present embodiment, when the guest information receiving unit 11 receives the guest information GI after transmitting the display information to the display 8, the recognition area calculating unit 14 is based on the guest information GI stored in the storage unit 12. Again, the recognition area of the guest is calculated. The recognition area calculation unit 14 generates recognition area information indicating the calculated recognition area, and sends the generated recognition area information to the risk determination unit 15. Other processing configurations of the server 1 are the same as those in the first embodiment described above.

FIG. 8 is a flowchart illustrating a processing procedure in the secret information display control processing according to the second embodiment. A series of processes described in the flowchart illustrated in FIG. 8 is started, for example, when the server 1 is powered on.

If the guest information receiving unit 11 does not receive the guest information GI from the sensor 3 (NO in step S21), the guest information receiving unit 11 waits for reception of the guest information GI by repeating step S21. When the guest information receiving unit 11 receives the guest information GI from the sensor 3 (YES in step S21), the guest information receiving unit 11 stores the received guest information GI in the storage unit 12.

When the guest information reception unit 11 receives the guest information GI (YES in step S21), the recognition region calculation unit 14 calculates the recognition region of the guest based on the guest information GI stored in the storage unit 12 ( Step S22). The recognition region calculation unit 14 generates recognition region information indicating the calculated recognition region, and sends the generated recognition region information to the risk determination unit 15.

Based on the recognition area information received from the recognition area calculation unit 14, the user information stored in the storage unit 12, and the terminal information stored in advance in the storage unit 12, the risk determination unit 15 A risk level of 10 is determined (step S23). The risk determination unit 15 generates risk level information indicating the determined risk level, and sends the generated risk level information to the control information transmission unit 16.

When the risk information is received from the risk determination unit 15, the control information transmission unit 16 determines whether or not display information has been transmitted to the display 8 (step S24). If display information has not yet been transmitted to display 8 (NO in step S24), control information transmitting unit 16 determines whether or not there is a terminal 10 having a risk level greater than threshold value α (step S25). The threshold α may be, for example, a degree of risk of 0 or can be arbitrarily set.

When there is no terminal 10 having a risk level greater than the threshold value α (NO in step S25), the control information transmission unit 16 calls the control information stored in advance in the storage unit 12 and receives it from the risk determination unit 15 The specific control information corresponding to the risk level of each terminal 10 indicated by the risk level information is transmitted to the terminal 10 (step S27).

If there is a terminal 10 having a degree of risk greater than threshold α (YES in step S25), control information transmission unit 16 calls display information stored in advance in storage unit 12 and transmits it to display 8 (step S26). . Thereafter, the process returns to step S21, and steps S21 to S25 are repeated.

When the display information has been transmitted to display 8 (YES in step S24), control information transmission unit 16 calls the control information stored in advance in storage unit 12, and receives the risk received from risk determination unit 15 Specific control information corresponding to the risk level of each terminal 10 indicated by the degree information is transmitted to the terminal 10 (step S27).

If the server 1 is not powered off (NO in step S28), the process returns to step S21, and steps S21 to S28 are repeated. If server 1 is turned off (YES in step S28), the process ends.

As described above, according to the secret information display control system 200 of the second embodiment, display information that can attract the attention of the guest can be displayed on the display 8. Thereby, it can be expected that the danger level of the terminal 10 is lowered by changing the recognition area of the guest.

In the second embodiment described above, the display 8 is provided. However, the display 8 is not limited thereto, and instead of the display 8, information that can attract the attention of the guest is displayed on the monitor of the terminal 10 where the user does not exist. There may be.

In the above-described embodiment, the sensor 3 is a device that includes an IC tag reader, a camera, and the like, detects the position of the guest from the IC tag 51 possessed by the guest, and determines the direction of the line of sight from the captured guest image. The detection configuration has been described as an example. However, the present invention described by taking the above-described embodiment as an example is not limited to such a configuration, and the sensor 3 may detect at least the position of the guest. In this case, the recognition area calculation unit 14 calculates the recognition area of the guest based on the guest position indicated by the guest information GI received by the guest information reception unit 11.

FIG. 9 is a block diagram showing a hardware configuration example of the server according to each embodiment of the present invention. As shown in FIG. 9, the server 1 includes a control unit 41, a main storage unit 42, an external storage unit 43, an operation unit 44, a display unit 45, and a transmission / reception unit 46. The main storage unit 42, the external storage unit 43, the operation unit 44, the display unit 45, and the transmission / reception unit 46 are all connected to the control unit 41 via the internal bus 40.

The control unit 41 is configured by a CPU (Central Processing Unit) 41A and the like, and executes each process according to a control program 49 stored in the external storage unit 43. The control unit 41 executes the processes described above with respect to the recognition area calculation unit 14, the risk determination unit 15, and the control information transmission unit 16 of the server 1.

The main storage unit 42 is configured by a RAM (Random-Access Memory) or the like, and a control program 49 stored in the external storage unit 43 is loaded and used as a work area of the control unit 41.

The external storage unit 43 includes a nonvolatile memory such as a flash memory, a hard disk, a DVD-RAM (Digital Versatile Disc Random-Access Memory), a DVD-RW (Digital Versatile Disc ReWritable). The external storage unit 43 stores in advance a computer program (hereinafter referred to as “program”) for causing the control unit 41 to perform processing of the server 1. Further, the external storage unit 43 supplies the data stored by the program to the control unit 41 in accordance with the instruction from the control unit 41 and stores the data supplied from the control unit 41. The storage unit 12 of the server 1 is configured in the external storage unit 43, for example.

The operation unit 44 includes a pointing device such as a keyboard and a mouse, and an interface device that connects the keyboard and the pointing device to the internal bus 40. When the user inputs information to the server 1, an instruction corresponding to the input operation is supplied to the control unit 41 via the operation unit 44.

The display unit 45 is configured by a CRT (Cathode Ray Tube) or an LCD (Liquid Crystal Display) or the like, and displays information supplied from the control unit 41. When the user inputs information to the server 1, the display unit 45 displays, for example, an operation screen.

The transmission / reception unit 46 includes, for example, a network termination device or a wireless communication device connected to a communication network, and a serial interface or a LAN (Local Area Network) interface connected to them. The transmission / reception unit 46 functions as the guest information reception unit, the user information reception unit 13 and the control information transmission unit 16 of the server 1. The server 1, the sensor 3, the terminal 10, and the display 8 may be connected by wire.

The guest information receiving unit 11, the storage unit 12, the user information receiving unit 13, the recognition area calculating unit 14, the risk determining unit 15, and the control information transmitting unit 16 of the server 1 illustrated in FIGS. 2 and 7 are, for example, a control program 49. However, it can be realized by executing the control unit 41, the main storage unit 42, the external storage unit 43, the operation unit 44, the display unit 45, the transmission / reception unit 46, and the like as resources.

In addition, the hardware configuration and flowchart described above are merely examples, and can be arbitrarily changed and modified.

The central part that performs the secret information display control process constituted by the control unit 41, the main storage unit 42, the external storage unit 43, the operation unit 44, the internal bus 40, etc. is not a dedicated system, but a normal computer system It can be realized using For example, the server 1 that executes the above-described processing may be configured by storing a program for executing the above operation on a computer-readable recording medium and distributing the program, and installing the program in the computer. Good. The storage medium is, for example, a flexible disk, a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Disc Read Only Memory), or the like. Further, the server 1 may be configured by storing the program in a storage device included in a computer communicably connected to a communication network such as the Internet and downloading the program by a normal computer system.

Further, when the function of the secret information display control device is realized by sharing of an OS (operating system) and an application program, or by cooperation between the OS and the application program, only the application program portion is stored in a recording medium or a storage device. It may be stored.

It is also possible to superimpose a program on a carrier wave and distribute it via a communication network. For example, the program may be posted on a bulletin board (BBS, Bulletin Board System) on the communication network, and the program may be distributed via the communication network. The program may be started and executed in the same manner as other application programs in the OS control environment so that the above-described processing can be executed.

A part or all of the above embodiments can be described as in the following supplementary notes, but is not limited thereto.
(Appendix 1)
A secret information display control system including a terminal that displays secret information set to be handled secretly, a sensor that detects the position of a guest, and a server that is communicably connected to the terminal and the sensor via a network Because
The terminal transmits user information indicating whether or not a user is using the terminal and whether or not the secret information is displayed to the server,
The sensor transmits guest information indicating the detected guest position to the server,
The server
User information receiving means for receiving the user information from the terminal;
Guest information receiving means for receiving the guest information from the sensor;
Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk;
Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
With
The terminal is a secret information display control system for controlling display of the secret information based on the control information received from the server.

(Appendix 2)
The secret information display control system according to supplementary note 1, wherein the sensor further detects the direction of the line of sight of the guest, and the guest information includes information indicating the direction of the line of sight of the guest.

(Appendix 3)
The control information transmitting means transmits a plurality of the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal,
In the supplementary note 1 or 2, the terminal displays the plurality of control information received from the server, and controls display of the secret information based on specific control information selected from the plurality of control information. The secret information display control system described.

(Appendix 4)
A display for outputting at least one of image and sound;
The server
It further comprises display information acquisition means for acquiring display information capable of drawing the guest's attention,
The control information transmitting means transmits the display information to the display,
The secret information display control system according to any one of supplementary notes 1 to 3, wherein the display displays the display information received from the server.

(Appendix 5)
The server
It further comprises display information acquisition means for acquiring display information capable of drawing the guest's attention,
The control information transmitting means transmits the display information to the terminal determined that the user does not exist based on the user information,
The secret information display control system according to any one of supplementary notes 1 to 3, wherein the terminal determined that the user does not exist displays the display information received from the server.

(Appendix 6)
A server that is communicably connected via a network to a terminal that displays secret information set to be handled secretly and a sensor that detects the location of the guest,
User information receiving means for receiving user information indicating whether or not the user using the terminal is present from the terminal and whether or not the secret information is displayed;
Guest information receiving means for receiving guest information indicating the position of the guest detected from the sensor;
Storage means for preliminarily storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk;
Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
A server comprising

(Appendix 7)
A terminal that displays secret information set to be handled secretly transmits user information indicating whether or not the user using the terminal is present and whether or not the secret information is displayed to the server,
A sensor that detects the position of the guest transmits guest information indicating the detected position of the guest to the server,
The server is
Receiving the user information from the terminal;
Receiving the guest information from the sensor;
When receiving the guest information, based on the guest information, calculate the recognition area of the guest, generate recognition area information indicating the calculated recognition area,
Based on the recognition area information, the user information, and terminal information indicating the position of the terminal, the risk level of the terminal is determined, and risk level information indicating the determined risk level is generated,
Control information indicating a control method for controlling display of the secret information corresponding to the risk level of the terminal indicated by the risk level information is transmitted to the terminal;
The terminal controls display of the secret information based on the control information received from the server.
Secret information display control method.

(Appendix 8)
A computer that is communicably connected via a network to a terminal that displays secret information that is set to be handled secretly and a sensor that detects the location of the guest,
User information receiving means for receiving from the terminal user information indicating whether or not the user is using the terminal and whether or not the secret information is displayed;
Guest information receiving means for receiving guest information indicating the detected position of the guest from the sensor;
Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk; and
Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
A computer-readable recording medium in which a computer program that functions as a computer is stored.

The present invention has been described above using the above-described embodiment as an exemplary example. However, the present invention is not limited to the above-described embodiment. That is, the present invention can apply various modes that can be understood by those skilled in the art within the scope of the present invention.

This application claims priority based on Japanese Patent Application No. 2013-187997 filed on September 11, 2013, the entire disclosure of which is incorporated herein.

DESCRIPTION OF SYMBOLS 1 Server 3, 3A-3D Sensor 8 Display 10, 10A-10I Terminal 11 Guest information receiving part 12 Storage part 13 User information receiving part 14 Recognition area | region calculation part 15 Risk degree determination part 16 Control information transmission part 40 Internal bus 41 Control part 41A CPU
42 main storage unit 43 external storage unit 44 operation unit 45 display unit 46 transmission / reception unit 49 control program 51 IC tag 100, 200 secret information display control system

Claims (8)

1. A secret information display control system including a terminal that displays secret information set to be handled secretly, a sensor that detects the position of a guest, and a server that is communicably connected to the terminal and the sensor via a network Because
   The terminal transmits user information indicating whether or not a user is using the terminal and whether or not the secret information is displayed to the server,
   The sensor transmits guest information indicating the detected position of the guest to the server,
   The server
   User information receiving means for receiving the user information from the terminal;
   Guest information receiving means for receiving the guest information from the sensor;
   Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
   When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
   A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk;
   Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
   With
   The terminal is a secret information display control system for controlling display of the secret information based on the control information received from the server.
2. The secret information display control system according to claim 1, wherein the sensor further detects a direction of the line of sight of the guest, and the guest information includes information indicating a direction of the line of sight of the guest.
3. The control information transmitting means transmits a plurality of the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal,
   3. The terminal displays the plurality of control information received from the server, and controls display of the secret information based on specific control information selected from the plurality of control information. The secret information display control system described in 1.
4. A display for outputting at least one of image and sound;
   The server
   It further comprises display information acquisition means for acquiring display information capable of drawing the guest's attention,
   The control information transmitting means transmits the display information to the display,
   The secret information display control system according to claim 1, wherein the display displays the display information received from the server.
5. The server
   It further comprises display information acquisition means for acquiring display information capable of drawing the guest's attention,
   The control information transmitting means transmits the display information to the terminal determined that the user does not exist based on the user information,
   The secret information display control system according to any one of claims 1 to 3, wherein the terminal determined that the user does not exist displays the display information received from the server.
6. A server that is communicably connected via a network to a terminal that displays secret information set to be handled secretly and a sensor that detects the location of the guest,
   User information receiving means for receiving user information indicating whether or not the user using the terminal is present from the terminal and whether or not the secret information is displayed;
   Guest information receiving means for receiving guest information indicating the position of the guest detected from the sensor;
   Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
   When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
   A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk;
   Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
   A server comprising
7. A terminal that displays secret information set to be handled secretly transmits user information indicating whether or not the user using the terminal is present and whether or not the secret information is displayed to the server,
   A sensor that detects the position of the guest transmits guest information indicating the detected position of the guest to the server,
   The server is
   Receiving the user information from the terminal;
   Receiving the guest information from the sensor;
   When receiving the guest information, based on the guest information, calculate the recognition area of the guest, generate recognition area information indicating the calculated recognition area,
   Based on the recognition area information, the user information, and terminal information indicating the position of the terminal, the risk level of the terminal is determined, and risk level information indicating the determined risk level is generated,
   Control information indicating a control method for controlling display of the secret information corresponding to the risk level of the terminal indicated by the risk level information is transmitted to the terminal;
   A secret information display control method in which the terminal controls display of the secret information based on the control information received from the server.
8. A computer that is communicably connected via a network to a terminal that displays secret information that is set to be handled secretly and a sensor that detects the location of the guest,
   User information receiving means for receiving from the terminal user information indicating whether or not the user is using the terminal and whether or not the secret information is displayed;
   Guest information receiving means for receiving guest information indicating the detected position of the guest from the sensor;
   Storage means for storing terminal information indicating the position of the terminal and control information indicating a control method for controlling display of the secret information;
   When the guest information receiving means receives the guest information, based on the guest information, the recognition area calculation means for calculating the recognition area of the guest and generating recognition area information indicating the calculated recognition area;
   A risk determination means for determining the risk of the terminal based on the recognition area information, the user information, and the terminal information, and generating risk information indicating the determined risk; and
   Control information transmitting means for transmitting the control information corresponding to the risk level of the terminal indicated by the risk level information to the terminal;
   A computer-readable recording medium in which a computer program that functions as a computer is stored.

Images