WO2017159106A1 - Monitoring device, aggregation system, monitoring method, and program - Google Patents

Abstract

Provided is a monitoring device (3), which is connected between a terminal main body (21) of a terminal device which carries out an information process and input peripherals (23) which transmit to the terminal main body (21) electrical signal patterns which are associated with a user's input operations, said monitoring device (3) comprising: a main body-side connection interface which is connected to the terminal main body (21); a peripheral-side connection interface which is connected to the input peripherals (23); an input operation identification unit which identifies the user's input operations which are associated with the electrical signal patterns; and an input operation recording unit which records in a recording medium, among the identified input operations, a predefined input operation to be recorded.

Description

Monitoring device, aggregation system, monitoring method and program

The present invention relates to a monitoring device, a counting system, a monitoring method, and a program.
This application claims priority on March 18, 2016 based on Japanese Patent Application No. 2016-055308 filed in Japan, the contents of which are incorporated herein by reference.

On toll roads such as expressways, offices (tollgate offices) are set up for each toll gate, and sales processing at each tollgate is tabulated using terminal devices installed in this tollgate office. (For example, refer to Patent Document 1).
The terminal device for aggregation processing used in the toll office is limited in its use, and there are few opportunities to be replaced for the purpose of multi-functionality and high performance. Therefore, once installed, it is used as it is for a relatively long period of time. Due to such circumstances, there is a concern that the terminal device used in the tollgate office is usually developed at an old time and is not sufficiently robust against an unauthorized operation by an operator.

Japanese Patent Laid-Open No. 2003-203254

The above-described terminal device for aggregation processing often does not have more resources than necessary for the purpose of cost reduction. Therefore, even if a new application for preventing unauthorized operation by a worker (terminal device user) is incorporated as software, resources are occupied by the application and the functions necessary for the original use are fully operational. It is assumed that it cannot be made.

In addition, even if a separate hardware device (for example, an input information monitoring device such as a line monitor) is used for a terminal device whose operation content is limited to some extent, It is assumed that only necessary information cannot be properly recorded. In this case, for example, it is difficult to appropriately specify the work specifically performed by the user from the log information recorded in a larger amount than necessary, which may increase the burden of subsequent analysis work.

It is an object of the present invention to appropriately record input operation information that can identify a user's work, and to reduce the burden of subsequent analysis work, a monitoring system, a counting system, a monitoring method, and To provide a program.

According to one aspect of the present invention, the monitoring device sends the terminal body (21) of the terminal device (20) that performs information processing and the electric signal pattern associated with the input operation of the user toward the terminal body. A monitoring device (3) connected to the input device (23) to be connected to the main body side connection interface (31) connected to the terminal main body, and a device side connection interface (31) connected to the input device. 32), an input operation specifying unit (301) for specifying a user's input operation related to the electric signal pattern, and a recording target input operation specified in advance among the specified input operations is recorded on a recording medium. And an input operation recording unit (302).
In this way, since the input operation to be recorded is limited to a predetermined recording target input operation, recording is limited to information necessary for specifying the user's work, which is unnecessary. Information can be prevented from being recorded. Therefore, it is possible to appropriately record the input operation that can identify the user's work, and to reduce the burden of the subsequent analysis work.

Moreover, according to one aspect of the present invention, the monitoring device described above includes an input command configured by one input operation or a combination of a plurality of the input operations, and a predetermined input restriction target command. , And when the input command matches the input restriction target command, an input for restricting transmission of the electric signal pattern associated with the input operation instructing execution of the input command to the terminal body A limiting unit (303) is further provided.
By doing in this way, it can prevent that a user performs the specific input command which should be restrict | limited with respect to a terminal device.

Further, according to one aspect of the present invention, the input restriction unit is an input time series indicating a change with time of the electric signal pattern associated with one input operation or a combination of the plurality of input operations. If the input time-series pattern deviates from the standard time-series pattern indicating the change over time of the electric signal pattern that is assumed to be generated as a result of an input operation by a human, the input time-series pattern is The transmission of the included electric signal pattern to the terminal body is restricted.
In this way, when an input time series pattern that deviates from the standard time series pattern that is defined on the assumption that a human input operation is assumed, an operation from the input device was performed by a malicious program. Therefore, it is possible to limit transmission of the electric signal pattern included in the input time series pattern to the terminal body. Therefore, the control software built in the input device is infected with a malicious program (malware), which prevents commands that are not intended by the operator from being input or the terminal body from being illegally operated. can do.

Moreover, according to one aspect of the present invention, the monitoring apparatus described above collates the specified input operation with a predetermined image extraction target input operation, and the input operation is the image extraction target input operation. A monitor image recording unit (304) for acquiring an image displayed on the monitor of the terminal device and recording it on a recording medium.
In this way, the image displayed on the monitor can be recorded as a log when a predetermined image extraction target input operation is received.

Moreover, according to one aspect of the present invention, the monitoring device described above performs an authentication process for a user and, when correctly authenticated, an authentication processing unit that connects between the terminal body and the input device ( 300).
By doing so, it is possible to disconnect the connection between the terminal body and the input device before it is correctly authenticated, thus preventing unauthorized persons from performing unauthorized operations. can do.

Moreover, according to one aspect of the present invention, the monitoring device further includes a light emission control unit (306) that causes the lighting unit to emit light in accordance with the timing when the input operation of the user is specified.
Thereby, the monitoring apparatus can make a user recognize simply that the monitoring apparatus is functioning effectively.

Moreover, according to one aspect of the present invention, the monitoring device described above further includes a display control unit (305) that causes the display unit to display information associated with the specified input operation.
Thereby, the monitoring device can visually notify the user that the input operation performed by the user himself / herself is accurately detected by the monitoring device 3.

According to another aspect of the present invention, the tabulation system (2A) includes the monitoring device described above and the terminal device, and the terminal device collects and collects information at a toll gate on the toll road as the information processing. The totaled charges are collected.

Moreover, according to one aspect of the present invention, a monitoring method includes: a terminal body of a terminal device that performs information processing; and an input device that transmits an electric signal pattern associated with a user's input operation toward the terminal body. A monitoring method using a monitoring device connected between the main body side connection interface connected to the terminal main body and a device side connection interface connected to the input device, wherein the electric signal pattern A step of specifying an input operation of a related user, and a step of recording a recording target input operation defined in advance among the specified input operations on a recording medium.

According to another aspect of the present invention, a program includes: a terminal body of a terminal device that performs information processing; and an input device that sends an electric signal pattern associated with a user's input operation toward the terminal body. A monitoring device computer connected between and connected to the terminal body and connected to the input device and a device-side connection interface connected to the input device is input to a user related to the electrical signal pattern. An input operation specifying unit that specifies an operation, and an input operation recording unit that records a predetermined recording target input operation on the recording medium among the specified input operations.

According to the monitoring device, the counting system, the monitoring method, and the program described above, it is possible to appropriately record information related to the input operation performed by the user on the terminal device, thereby reducing the burden of subsequent analysis work.
In addition, the purpose of “post-mortem analysis” here is, for example, specifying whether the worker has performed an illegal act (unauthorized operation), whether the worker has made a mistake or whether the work declaration is false. -There are things such as specifying whether there is no error and checking the consistency between the work contents of the operator and the operation contents of the terminal body (whether the terminal body is malfunctioning or malware infection is present).

It is a figure which shows the whole structure of the toll gate and the toll gate office which concern on 1st Embodiment. It is a figure which shows the function structure of the total system which concerns on 1st Embodiment. It is a figure which shows the structure of CPU and a recording medium which concern on 1st Embodiment. It is a figure which shows the 1st processing flow of CPU which concerns on 1st Embodiment. It is the 1st figure showing the table for input operation specification concerning a 1st embodiment. It is a 2nd figure which shows the table for input operation specification which concerns on 1st Embodiment. It is a 1st figure which shows the recording target input operation table which concerns on 1st Embodiment. It is a 2nd figure which shows the recording target input operation table which concerns on 1st Embodiment. It is a figure which shows the 2nd process flow of CPU which concerns on 1st Embodiment. It is a figure which shows the input restriction | limiting object table which concerns on 1st Embodiment. It is a figure which shows the 3rd processing flow of CPU which concerns on 1st Embodiment. It is a figure which shows the image extraction object input operation table which concerns on 1st Embodiment.

<First Embodiment>
Hereinafter, a toll collector according to the first embodiment will be described with reference to FIGS.

(overall structure)
FIG. 1 is a diagram illustrating an overall configuration of a toll gate and a toll gate office according to the first embodiment.
As shown in FIG. 1, the toll booth 1 has a manned booth 10 installed on the side of a lane L on which a vehicle A about to leave a toll road travels.

In the manned booth 10, a receiver who performs toll collection processing for the driver of the vehicle A and the like waits. The toll collector performs toll collection processing using a toll collecting machine 10 </ b> A installed in the manned booth 10.

The fee collection machine 10A performs a fee collection process for the user in accordance with an operation by the collection member. Specifically, the toll collector 10A receives entrance information indicating an entrance through which the vehicle A has passed, information indicating the vehicle type of the vehicle A, and the like, and determines a fee (charged amount) for the vehicle A. Further, the toll collection machine 10A accepts the input of money (banknotes, coins) received from the driver of the vehicle A, etc., calculates the change, or issues a receipt after the delivery of money is completed.
The toll collector 10A records and accumulates various information indicating the sales amount, vehicle type, entrance, etc. received from the vehicle A traveling in the lane L on an internal recording medium. These pieces of information accumulated in the toll collector 10A are transmitted to the toll office 2 (described later) in predetermined time units (for example, in units of one day) by the operation of the toll collector.

Although not shown, a plurality of lanes L are laid in the toll gate 1 according to the present embodiment. The toll gate 1 is provided with a plurality of manned booths 10 and toll collectors 10A for each lane L. In the toll booth office 2 in the vertical direction, the various information recorded and accumulated by the plurality of fee collectors 10A is collected.

The toll booth office 2 is a facility for monitoring the toll booth 1 and collecting and managing various information acquired at the toll booth 1. In the toll booth office 2, a monitor who monitors the toll booth 1 through a monitoring camera or the like is stationed. The monitor uses a counting system 2A installed in the toll booth office 2 to perform tabulation processing on the sales amount acquired and collected at the toll booth 1.

As shown in FIG. 1, the counting system 2A includes a terminal device 20 and a monitoring device 3. The terminal device 20 includes a terminal main body 21, a monitor 22, and an input device 23.

The terminal device 20 is a terminal device in which a dedicated application for performing a totaling process of charges (sales amount) received at the toll gate 1 is installed. The terminal main body 21 has main hardware (motherboard, CPU, memory, hard disk, power supply unit, etc.) of the terminal device 20 inside. The monitor 22 is a display device that transmits information to the user (monitor) of the terminal device 20 through vision, and is, for example, a liquid crystal display. The input device 23 is a human interface used when the user gives a command related to the tabulation process to the terminal device 20. In the present embodiment, the input device 23 is specifically a mouse, a keyboard, or a panel computer that receives a predetermined input operation from the user. These human interfaces (input device 23) send out an electric signal pattern (associated with the input operation) corresponding to the input operation of the user toward the terminal body 21.
Here, the electric signal pattern is an array pattern of logical information “1” and “0” associated with two kinds of voltage levels “High” and “Low”.

The monitoring device 3 is connected to the terminal device 20 and monitors an input operation performed on the terminal device 20.

(Functional configuration of aggregation system)
FIG. 2 is a diagram illustrating a functional configuration of the aggregation system according to the first embodiment.
As shown in FIG. 2, the monitoring device 3 is connected between the terminal main body 21 of the terminal device 20 that performs aggregation processing and the input device 23 (mouse 23 a, keyboard 23 b, panel computer 23 c) of the terminal device 20. Yes.

As shown in FIG. 2, the monitoring device 3 includes a CPU 30, a main body side connection interface 31, a device side connection interface 32, a signal transmission unit 33, a connection switch 34, a display 35, and a card reader 36. LED (LightＬＥＤEmitting Diode) 37 and a recording medium 38.

The CPU 30 is a processor that controls the overall operation of the monitoring device 3. Various functions of the CPU 30 in the monitoring device 3 will be described later.

The main body side connection interface 31 is a connection interface connected to the terminal main body 21 (connection interface 21a) of the terminal device 20. The device side connection interface 32 is a connection interface connected to the input device 23 of the terminal device 20.
Here, the input device 23 is originally directly connected to the connection interface 21 a of the terminal body 21. For the connection interface between the terminal body 21 and the input device 23, standards such as PS / 2, USB (Universal Serial Bus), and RS-232C are used. Therefore, the main body side connection interface 31 and the device side connection interface 32 have a plurality of connection interfaces compliant with the standard.

The signal transmission unit 33 is provided on the transmission line α connecting the main body side connection interface 31 and the device side connection interface 32 inside the monitoring device 3. The signal transmission unit 33 temporarily retains the electrical signal pattern received from each of the input devices 23 and transmits the retained electrical signal pattern to the terminal body 21 according to control by the CPU 30.

The connection switch 34 is provided on the transmission line α connecting the main body side connection interface 31 and the device side connection interface 32 inside the monitoring device 3, and can switch connection / disconnection of each transmission line α according to control by the CPU 30. It is an element to do. When the connection switch 34 is in a connected state, the terminal main body 21 and the input device 23 are connected, and an electric signal pattern can be transmitted from the input device 23 to the terminal main body 21. On the other hand, while the connection switch 34 is in a disconnected state, the electrical signal pattern sent from the input device 23 is not transmitted to the terminal body 21.

The display 35 is a display means incorporated in the housing of the monitoring device 3, and is, for example, a liquid crystal display. The display 35 displays information indicating the input operation of the user.

The card reader 36 reads an ID card in which identification information unique to the user (user identification information) is recorded.

The LED 37 is an aspect of lighting means attached to the housing of the monitoring device 3.

The recording medium 38 is a recording medium built in the monitoring apparatus 3, and is, for example, an HDD (Hard Disk Drive), an SSD (Solid State Drive) or the like.

As shown in FIG. 2, the monitoring device 3 is also connected between the terminal body 21 and the monitor 22. The transmission line β to which the monitor 22 is connected via the device side connection interface 32 directly connects the main body side connection interface 31 and the device side connection interface 32.

(Configuration of CPU and recording medium)
FIG. 3 is a diagram illustrating a configuration of the CPU and the recording medium according to the first embodiment.
Hereinafter, the configurations of the CPU 30 and the recording medium 38 will be described with reference to FIGS. 2 and 3.

As illustrated in FIG. 3, the CPU 30 includes an authentication processing unit 300, an input operation specifying unit 301, an input operation recording unit 302, an input restriction unit 303, a monitor image recording unit 304, a display control unit 305, and a light emission control unit 306. It has the function of

The authentication processing unit 300 performs an authentication process for the user of the terminal device 20 and connects the terminal main body 21 and the input device 23 when correctly authenticated. Specifically, the authentication processing unit 300 acquires user identification information read from the ID card through the card reader 36. Then, the authentication processing unit 300 refers to the authentication table 380 recorded on the recording medium 38 and determines whether or not the acquired user identification information is registered in the authentication table 380. Here, the authentication table 380 is an information table in which user identification information of a person who uses the terminal device 20 is recorded.
When the user identification information read from the ID card is recorded in the authentication table 380 (that is, when correctly authenticated), the authentication processing unit 300 outputs a connection instruction signal to the connection switch 34 to connect The switch 34 is connected.

The input operation specifying unit 301 specifies the user's input operation related to the electrical signal pattern received from the input device 23. Specifically, the input operation specifying unit 301 refers to the electric signal pattern temporarily held in the signal transmission unit 33 and specifies the input operation of the user related to the electric signal pattern.
Here, the “input operation” is an operation (behavior) that is specifically performed on the input device 23 when the user gives a command to the terminal device 20. More specifically, for example, operations performed on the keyboard 23b include operations of pressing various input keys such as “pressing the Enter key” and “pressing the Delete key”. For the mouse 23a, there are “single click”, “double click”, “right click”, “cursor move”, “drag” (move the cursor while pressing the left button), and the like. Further, regarding the panel computer 23c, “tap” (tap the panel with a finger), “flick” (pay the panel with a finger), “drag” (move the finger while touching the panel), “swipe” (to the panel) Slide your finger while touching).
In the recording medium 38, an input operation specifying table 381 for associating the input operation as described above with the electric signal pattern transmitted from each input device 23 upon receiving the input operation is recorded in advance. The input operation specifying unit 201 refers to the input operation specifying table 381 and acquires the input operation associated with the electric signal pattern held in the signal transmission unit 33. In this way, the input operation specifying unit 201 specifies the user's input operation related to the electric signal pattern.

The input action recording unit 302 records a predetermined (predetermined) recording target input action on the recording medium 38 among the input actions specified by the input action specifying unit 201. Specifically, the input operation recording unit 302 refers to the recording target input operation table 382 recorded in advance on the recording medium 38, and inputs specified as “recording target input operation” in the recording target input operation table 382. The operation is recorded on the recording medium 38.
Information (input operation information) indicating the input operation recorded by the input operation recording unit 302 is accumulated in the input operation log 385 together with time information indicating the input date and time.

The input restriction unit 303 restricts transmission of an electric signal pattern related to an input operation that satisfies a predetermined condition to the terminal main body 21. Specifically, the input restriction unit 303 collates an input command input from the user with a predetermined input restriction target command, and whether the input command matches the input restriction target command. Determine whether or not. When the input command that has been input matches the input restriction target command, the input restriction unit 303 restricts transmission of an electric signal pattern related to an input operation that instructs execution of the input command.
Note that an input restriction target command table 383 is recorded in advance on the recording medium 38. The input restriction target command table 383 is an information table in which input commands defined as “input restriction target commands” are recorded.
The “input command” is a character string composed of a combination of a plurality of input operations (key presses) received by the keyboard 23b, and specifies a process to be executed by the terminal device 20. For example, the input command includes “copy” for designating a copy of a file, “delete” for designating deletion of the file, and the like. Further, the process specified by such an input command is actually executed at the time when a special key press (for example, Enter key press) is received following the input operation of the input command. That is, in this embodiment, the input operation “pressing the Enter key” is an input operation that instructs the terminal device 20 to execute the input command input immediately before the Enter key is pressed.

The monitor image recording unit 304 acquires an image displayed on the monitor 22 of the terminal device 20 and records it on the recording medium 38 when the input operation specified by the input operation specifying unit 201 satisfies a predetermined condition. Specifically, the monitor image recording unit 304 compares the specified input operation with a predetermined image extraction target input operation, and whether the specified input operation matches the image extraction target input operation. Determine whether or not. When the input operation matches the image extraction target input operation, the monitor image recording unit 304 acquires the image displayed on the monitor 22 of the terminal device 20 and records it on the recording medium 38. Note that an image extraction target input operation table 384 is recorded in the recording medium 38 in advance. The image extraction target input operation table 384 is an information table in which an input operation defined as “image extraction target input operation” is recorded.
The image recorded by the monitor image recording unit 304 is accumulated in the monitor image log 386 together with time information indicating the input date and time.

The display control unit 305 causes the display 35 to display information indicating the input operation specified by the input operation specifying unit 201.

The light emission control unit 306 causes the LED 37 to emit light according to the timing when the user input operation is specified.

(First processing flow of CPU)
FIG. 4 is a diagram illustrating a first processing flow of the CPU according to the first embodiment.
FIG. 5 and FIG. 6 are a first diagram and a second diagram, respectively, showing the input operation specifying table according to the first embodiment.
FIGS. 7 and 8 are a first diagram and a second diagram, respectively, showing a recording target input operation table according to the first embodiment.
Hereinafter, the first processing flow of the CPU will be described with reference to FIGS.

The first processing flow shown in FIG. 4 is executed at a stage where the user operates the terminal device 20 after the user is correctly authenticated through the authentication processing by the authentication processing unit 300.

When a certain input device 23 receives a predetermined input operation and sends out an electric signal pattern associated with the input operation, the electric signal pattern is temporarily held in the signal transmission unit 33 (FIG. 2). The input operation specifying unit 301 acquires the electrical signal pattern held in the signal transmission unit 33 (step S00).
Next, the input operation specifying unit 301 specifies the input operation associated with the electrical signal pattern acquired from the signal transmission unit 33 (step S01). Here, the input operation specifying unit 301 refers to the input operation specifying table 381 recorded in advance on the recording medium 38.

The input operation specifying table 381 shown in FIG. 5 records an input operation received by the keyboard 23b (such as pressing the Enter key) and an electric signal pattern sent out by the keyboard 23b according to the received input operation in association with each other. Yes.
Further, the input operation specifying table 381 shown in FIG. 6 records the input operation (double click or the like) received by the mouse 23a and the electric signal pattern sent out by the mouse 23a in accordance with the received input operation in association with each other. ing.
In step S01, the input operation specifying unit 301 acquires the electric signal pattern held in the signal transmission unit 33, and refers to the input operation specifying table 381 shown in FIGS. Identify the associated input action.

Next, the display control unit 305 causes the display 35 to display information indicating the input operation specified by the input operation specifying unit 301 (step S02). For example, when the specified input operation is “pressing the Enter key” on the keyboard 23 b, the display control unit 305 displays “Enter” or the like on the display 35. Further, for example, when the specified input operation is “double click” with the mouse 23 a, the display control unit 305 displays “double click” or the like on the display 35.

In addition, the light emission control unit 306 turns on the LED 37 for a predetermined time (for example, about several tens to several hundreds of milliseconds) at the timing when the input operation is specified by the input operation specifying unit 301 (step S03).

Next, the input action recording unit 302 collates the input action specified in step S01 with the recording target input action table 382, and determines whether or not the specified input action is a “recording target input action”. Is determined (step S04).

Here, the recording target input operation table 382 shown in FIG. 7 defines which input operation among the various input operations accepted by the keyboard 23b is the recording target (recording target input operation). For example, according to the recording target input operation table 382 shown in FIG. 7, the input operations of “Enter key pressed”, “Delete key pressed”, “Space key pressed”, and “BackSpace key pressed” are recording target input operations. It is prescribed. Further, according to the recording target input operation table 382 shown in FIG. 7, it is specified that input operations such as “F (function) 1 key press”, “F2 key press”, etc. are not recording target input operations.
In addition, the recording target input operation table 382 shown in FIG. 8 defines which input operation among the various input operations received by the mouse 23a is the recording target (recording target input operation). For example, according to the recording target input operation table 382 shown in FIG. 8, it is specified that the input operations of “single click”, “double click”, and “right click” are recording target input operations. Further, according to the recording target input operation table 382 shown in FIG. 8, it is defined that input operations such as “cursor movement” and “drag” are not recording target input operations.

When the input operation specified in step S01 is the recording target input operation defined in the recording target input operation table 382 (step S04: YES), the input operation recording unit 302 displays the specified input operation. The information (input operation information) is recorded on the recording medium 38 in association with the time information indicating the specified time and the user identification information indicating the user who performed the input operation (step S05). It is assumed that the user identification information recorded here is acquired through an authentication process performed by the authentication processing unit 300. The input operation information, time information, and user identification information recorded in step S05 are stored as an input operation log 385.
On the other hand, when the input operation specified in step S01 is not the recording target input operation recorded in the recording target input operation table 382 (step S04: NO), the input operation recording unit 302 records the input operation. The process ends without recording on the medium 38.

(Second processing flow of CPU)
FIG. 9 is a diagram illustrating a second processing flow of the CPU according to the first embodiment.
FIG. 10 is a diagram illustrating an input restriction target table according to the first embodiment.
Hereinafter, the second processing flow of the CPU will be described with reference to FIGS. 9 and 10.

The second processing flow shown in FIG. 9 is after the user is correctly authenticated through the authentication processing by the authentication processing unit 300, and in step S01 (FIG. 4) of the first processing flow, It is executed at the stage when the input operation for the input device 23 is specified.

When the input operation specified in step S01 of the first processing flow is an input operation accepted from the keyboard 23b, the input restriction unit 303 temporarily stores key information indicating the input operation (which key has been pressed). Recording is performed in a memory (not shown in FIGS. 2 and 3) (step S11). Here, the temporary memory may be a memory provided inside the CPU 30 or a memory (DRAM (Dynamic Random Access Memory) or the like) connected to the outside of the CPU 30. For example, when the input operation specified in step S01 is “pressing“ d ”key”, the input restriction unit 303 records key information “d” in the temporary memory in step S11.

Next, the input restriction unit 303 determines whether or not the input operation received from the keyboard 23b (the input operation specified in step S01 (FIG. 4)) is “Enter key pressed” (step S12).
When the input operation received from the keyboard 23b is not “Enter key pressed” (step S12: NO), the input restriction unit 303 outputs a transmission instruction signal to the signal transmission unit 33 (FIG. 2) and is retained. The received electrical signal pattern (that is, the electrical signal pattern associated with the input operation received from the keyboard 23b) is sent to the terminal body 21 (step S13). As a result, an electric signal pattern associated with an input operation (for example, “d” key press) performed by the user on the keyboard 23b is sent to the terminal body 21, and the result is reflected on the monitor 22 or the like ( For example, the letter “d” is displayed on the monitor 22).
After the process of step S13, the input restriction unit 303 returns to step S11 again and records the input operation from the keyboard 23b specified for the second time in the temporary memory. Here, if the input operation specified for the second time is “pressing the“ e ”key”, the input restriction unit 303 temporarily stores the key information “e” following “d” recorded for the first time. Record in memory. Thus, a character string (input command) “de” is formed on the temporary memory. In step S <b> 13, an electrical signal pattern associated with the input operation “e” key press ”is sent to the terminal body 21.

On the other hand, when the input operation received from the keyboard 23b is “Enter key pressed” (step S12: YES), the input restriction unit 303 inputs the input command (for example, a character string “de”) recorded in the temporary memory. Is equal to the “input restriction target command” (step S14).

Here, the input restriction target command table 383 illustrated in FIG. 10 defines which input command among the various input commands to be input is the input restriction target (input restriction target command).
According to the input restriction target command table 383 shown in FIG. 10, it is specified that character strings (input commands) such as “format” and “delete” are input restriction target commands.

When the input command recorded in the temporary memory does not match any “input restriction target command” (step S14: NO), the input restriction unit 303 sends a transmission instruction signal to the signal transmission unit 33. The output and the electric signal pattern associated with the input operation of “Enter key pressed” are sent to the terminal body 21 (step S15).
In this case, the input restriction unit 303 deletes the input command recorded in the temporary memory (step S16).
Thereafter, the input restriction unit 303 returns to step S11 and repeatedly executes the same processing flow.

On the other hand, when the input command recorded in the temporary memory matches any “input restriction target command” (step S14: YES), the input restriction unit 303 does not perform the processes of steps S15 and S16. . Thereby, even if the user presses the Enter key, the electric signal pattern associated with the input operation of “Enter key press” is blocked inside the monitoring device 3 and is not transmitted to the terminal body 21.
Thereafter, the input restriction unit 303 returns to step S11 and repeatedly executes the same processing flow.

(Third processing flow of CPU)
FIG. 11 is a diagram illustrating a third processing flow of the CPU according to the first embodiment.
FIG. 12 is a diagram illustrating an image extraction target input operation table according to the first embodiment.
Hereinafter, the third processing flow of the CPU will be described with reference to FIGS. 11 and 12.

The third processing flow shown in FIG. 11 is similar to the second processing flow (FIG. 9). In step S01 (FIG. 4) of the first processing flow, the user's input operation to the input device 23 is specified. It is executed in the stage where

The monitor image recording unit 304 collates the input operation specified in step S01 of the first processing flow with the image extraction target input operation table 384, and the specified input operation is “image extraction target input operation”. It is determined whether or not (step S21).

Here, the image extraction target input operation table 384 shown in FIG. 12 indicates which screen shot recording (image extraction processing) is executed when any input operation is specified among various input operations. (I.e., the input operation to perform screen shot recording).
According to the image extraction target input operation table 384 shown in FIG. 12, it is defined that input operations such as “single click” and “double click” are image extraction target input operations.

When the specified input operation is the image extraction target input operation (step S21: YES), the monitor image recording unit 304 performs a screen shot of the image displayed on the monitor 22 (step S22). Here, the monitor image recording unit 304 acquires an image through a transmission line β (see FIG. 2) connected between the terminal main body 21 and the monitor 22. The monitor image recording unit 304 records the acquired image on the recording medium 38 in association with time information indicating the date and time when the image was acquired and user identification information. The acquired image, time information, and user identification information recorded in step S22 are accumulated as a monitor image log 386.
On the other hand, when the specified input operation is not the image extraction target input operation (step S21: NO), the monitor image recording unit 304 ends the process without executing step S22.

(Function, effect)
As described above, the monitoring device 3 according to the first embodiment sends the terminal main body 21 that is the main body of the terminal device 20 and the electric signal pattern associated with the input operation of the user toward the terminal main body 21. It is connected between the input device 23. Further, the monitoring device 3 includes a main body side connection interface 31 connected to the terminal main body 21 and a device side connection interface 32 connected to the input device 23. Further, the CPU 30 of the monitoring device 3 includes an input operation specifying unit 301 that specifies a user's input operation related to the electric signal pattern, and a recording target input operation that is defined in advance among the specified input operations. And an input operation recording unit 302 for recording.
By doing in this way, the monitoring apparatus 3 is not the electric signal pattern itself but the information which shows the input operation which the user actually performed for the electric signal pattern sent toward the terminal main body 21 from the input device 23. Record with. Thereby, by referring to the recorded input operation log, it is possible to easily analyze the work performed on the terminal device 20 by the user.

In addition, since the input operation to be recorded is limited to a predetermined recording target input operation, only the information necessary for specifying the user's work is recorded, and unnecessary information is not recorded. Can be. For example, in the case of an input operation with respect to the keyboard 23b, it is possible not to leave a log for pressing of a key that is not used in the terminal device 20 (no processing is performed) such as some function keys.
In addition, for example, the input operation related to the cursor movement of the mouse 23a is often not required to specifically specify the work performed by the user even if recording is performed one by one. Therefore, it is possible not to leave a log for the input operation related to the cursor movement of the mouse 23a.
As described above, it is possible to appropriately record only the input operation that can identify the work performed by the user, and to reduce the burden of the subsequent analysis work. Further, since unnecessary information is not recorded, the storage capacity of the recording medium 38 can be saved.

In addition, the monitoring device 3 according to the first embodiment includes an input restriction unit 303. Here, as described above, the input restriction unit 303 collates an input command configured by a combination of a plurality of input operations related to the keyboard 23b with a predetermined input restriction target command. When the input command matches the input restriction target command, the input restriction unit 303 uses the terminal of the electric signal pattern associated with the input operation (for example, “Enter key press”) instructing the execution of the input command. Restrict sending to the main body 21.
By doing in this way, it can prevent that a user performs the specific input command which should be restrict | limited when using the terminal device 20. FIG. For example, the input command “format” is an input command for erasing all information recorded on the recording medium of the terminal device 20, and should be restricted in use in normal business. The input restriction unit 303 restricts transmission of an electric signal pattern associated with an input operation (pressing the Enter key) instructing execution of the input command when a character string “input” (an input command) is configured. To do. As a result, the user cannot execute the process related to “format” on the terminal device 20.

The monitoring device 3 according to the first embodiment further includes a monitor image recording unit 304. Here, the monitor image recording unit 304 collates the input operation specified by the input operation specifying unit 301 with the image extraction target input operation specified in advance as described above. The monitor image recording unit 304 acquires the image displayed on the monitor 22 of the terminal device 20 and records it on the recording medium 38 when the specified input operation matches the image extraction target input operation.
In this way, the image displayed on the monitor 22 can be recorded as a log when a predetermined image extraction target input operation is received. For example, when the user performs a “single click” input operation on the mouse 23a, it is often impossible to know what work the user is actually performing by using only information related to the input operation. . Therefore, when an input operation of “single click” is received from the mouse 23a, the operation performed by the user through the input operation of “single click” is grasped in more detail by separately recording an image at that time. can do.

In addition, the monitoring device 3 according to the first embodiment further includes an authentication processing unit 300 that performs authentication processing for the user and connects the terminal body 21 and the input device 23 when correctly authenticated. ing.
By doing so, since the terminal main body 21 and the input device 23 are physically separated before being correctly authenticated, it is possible to prevent a person who has not performed authentication processing from performing an unauthorized operation. be able to.

The monitoring device 3 according to the first embodiment further includes a light emission control unit 306 that causes the lighting unit (LED 37) to emit light according to the timing when the user's input operation is specified.
According to the light emission control unit 306, whenever the user performs some input operation on the input device 23, the LED 37 of the monitoring device 3 is turned on. Thereby, the monitoring apparatus 3 can make a user recognize simply that the own apparatus (monitoring apparatus 3) is functioning effectively. Therefore, it is possible to reduce the consciousness of the user who intends to perform fraud, and to suppress fraudulent operations.

The monitoring device 3 according to the first embodiment further includes a display control unit 305 that displays information indicating the input operation specified by the input operation specifying unit 301 on the display unit (display 35).
According to the display control unit 305, for example, when the user performs an input operation such as “pressing the Enter key”, information indicating the input operation (character string information “Enter”) is displayed on the display 35. . Then, the user of the terminal device 20 grasps that the input operation performed by the user is correctly recognized by the monitoring device 3. Thereby, the monitoring device 3 can visually notify the user that the input operation performed by the user himself / herself is accurately detected by the monitoring device 3. Therefore, unauthorized operation by the user can be further suppressed.

<Modification of First Embodiment>
Although the monitoring device 3 according to the first embodiment has been described in detail above, the specific aspect of the monitoring device 3 according to the first embodiment is not limited to the above-described one, and departs from the gist. It is possible to add various design changes and the like within the range not to be performed.

For example, the monitoring device 3 according to the first embodiment may further include the following functions.
The monitoring device 3 performs an input operation at a speed significantly exceeding the speed of the input operation from the input device 23 performed in normal business (for example, the number of times the key is pressed per predetermined time if the input is from the keyboard 23b). When the signal is detected, the transmission of the electric signal pattern corresponding to the input operation and all electric signal patterns thereafter (or until a predetermined time elapses) may be restricted.
More specifically, first, the input restriction unit 303 acquires an “input time-series pattern” indicating a change with time of an electric signal pattern associated with one input operation or a combination of a plurality of input operations. . This “input time-series pattern” is obtained, for example, by sampling a set of electrical signal patterns that are continuously transmitted from the input device 23 when an input operation is continuously performed at regular time intervals.
Then, when the input time series pattern deviates from the “standard time series pattern” indicating the temporal change of the electric signal pattern assumed to be generated as a result of the input operation by a human, the input restriction unit 303 The transmission of the electric signal pattern included in the input time series pattern to the terminal body 21 is restricted. Note that the “standard time series pattern” matches, for example, a set of electrical signal patterns that are continuously transmitted from the keyboard 23b when the key is pressed “20 times” per second from the keyboard 23b. Predefined.
Here, in recent years, a cyber attack called “BAD USB” has been regarded as a problem. “BAD USB” refers to charging malware into control software (firmware) built in a USB device. For example, by loading a USB keyboard control firmware and a keyboard input reproduction program into a USB memory, key input can be performed without permission from the user. For the PC side, it seems that the user has just entered the key from the keyboard, and generally, the USB firmware cannot be accessed from the PC side, so detection and removal cannot be performed, and it is difficult to take a complete countermeasure in principle. Has been.
However, the monitoring device 3 according to the above aspect, when an “input time series pattern” that deviates from a “standard time series pattern” that is defined assuming normal input operations by human beings is input, a malicious program (malware ), It is determined that the key operation of the keyboard 23b has been performed, and transmission of the input time series pattern to the terminal body 21 can be restricted. Therefore, it is possible to prevent the control software built in the input device 23 from being infected with a malicious program, thereby causing a command not intended by the operator to be input or the terminal body to be illegally operated. Can do.

In the first embodiment, the monitor image recording unit 304 extracts an image displayed on the monitor 22 when an input operation that matches a predetermined image extraction target input operation is specified (screenshot). Explained). However, other embodiments are not limited to this aspect.
For example, the monitor image recording unit 304 according to the modification of the first embodiment measures time, and takes a screen shot at a timing when a predetermined time has elapsed (or timing when a predetermined time is reached). It may be done.

Further, the input operation recording unit 302 (monitor image recording unit 304) according to the first embodiment is described as recording the input operation log 385 (monitor image log 386) in the recording medium 38 built in the monitoring device 3 itself. However, other embodiments are not limited to this aspect.
For example, the input operation recording unit 302 (monitor image recording unit 304) according to the modified example of the first embodiment has an input operation log 385 (monitor image log 386) installed in a remote place via a network. It may be a mode of recording.
In other words, the monitoring device 3 may have a mode in which a recording medium for recording various logs (the input operation log 385 and the monitor image log 386) is not provided.

Further, the monitoring device 3 according to the first embodiment has been described as including the card reader 36 and performing the authentication process based on the user identification information read through the card reader 36. The form is not limited to this aspect.
For example, the monitoring device 3 according to the modified example of the first embodiment may include an input unit (for example, a numeric keypad) that receives a login ID and a password from a user, instead of including the card reader 36. Good. In this case, the monitoring device 3 may divert the keyboard 23b, which is the input device 23 of the terminal device 20, as an input unit for authentication processing with respect to the monitoring device 3.

Moreover, although the monitoring apparatus 3 which concerns on 1st Embodiment was demonstrated as an aspect which has the display 35 and the display control part 305, in other embodiment, it is not limited to this aspect.
The monitoring apparatus 3 according to the modification of the first embodiment may not include the display 35 and the CPU 30 may not include the display control unit 305.

Moreover, although the monitoring apparatus 3 which concerns on 1st Embodiment was demonstrated as an aspect which has LED37 and the light emission control part 306, in other embodiment, it is not limited to this aspect.
The monitoring device 3 according to the modification of the first embodiment may not include the LED 37, and the CPU 30 may not include the light emission control unit 306.

In addition, although the CPU 30 of the monitoring device 3 according to the first embodiment has been described as having the functions of the input restriction unit 303 and the monitor image recording unit 304, other embodiments are not limited to this mode. That is, for the monitoring device 3 according to another embodiment, the input restriction unit 303, the monitor image recording unit 304, the input restriction target command table 383, and the image extraction target input operation table 384 are not essential components.

In the first embodiment, the “input command” has been described as a combination (character string) of a plurality of input operations from the keyboard 23b. However, in other embodiments, a single input operation ( For example, there may be an input command consisting of only one alphabetic character.

In the first embodiment, the “electric signal pattern” is an array pattern of logical information “1” and “0” associated with two kinds of voltage levels of “High” and “Low”. Although described, other embodiments are not limited to this aspect. That is, the electric signal pattern may be in any form as long as the input operation accepted by the input device 23 can be distinguished on the terminal body 21 side.

Further, in each of the above-described embodiments, the processes of the various processes of the monitoring device 3 described above are stored in a computer-readable recording medium in the form of a program. Various processes are performed. The computer-readable recording medium is a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

The above program may be for realizing a part of the above-described functions. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, what is called a difference file (difference program) may be sufficient. Furthermore, the monitoring device 3 may be composed of a single computer, or may be composed of a plurality of computers connected so as to be communicable.

As described above, several embodiments according to the present invention have been described. However, all these embodiments are presented as examples, and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the invention described in the claims and equivalents thereof as well as included in the scope and gist of the invention.

According to the above-described monitoring device, counting system, monitoring method, and program, it is possible to appropriately record information related to the input operation performed by the user on the terminal device, thereby reducing the burden of subsequent analysis work.

1 toll booth 10 manned booth 10A toll booth 2 toll booth office 2A totaling system 20 terminal device 21 terminal body 21a connection interface 22 monitor 23 input device 23a mouse 23b keyboard 23c panel computer 3 monitoring device 30 CPU
300 Authentication processing unit 301 Input operation specifying unit 302 Input operation recording unit 303 Input restriction unit 304 Monitor image recording unit 305 Display control unit 306 Light emission control unit 31 Main body side connection interface 32 Device side connection interface 33 Signal transmission unit 34 Connection switch 35 Display 36 Card reader 37 LED
38 Recording medium 380 Authentication table 381 Input operation specifying table 382 Recording target input operation table 383 Input restriction target command table 384 Image extraction target input operation table 385 Input operation log 386 Monitor image log α, β Transmission line

Claims (10)

1. A monitoring device connected between a terminal body of a terminal device that performs information processing and an input device that sends an electric signal pattern associated with a user's input operation toward the terminal body,
   A main body side connection interface connected to the terminal main body,
   A device-side connection interface connected to the input device;
   An input operation specifying unit for specifying an input operation of a user related to the electrical signal pattern;
   Among the specified input operations, an input operation recording unit that records a predetermined recording target input operation on a recording medium;
   A monitoring device comprising:
2. An input command configured by one input operation or a combination of a plurality of input operations is compared with a predetermined input restriction target command, and the input command matches the input restriction target command. The monitoring apparatus according to claim 1, further comprising: an input restriction unit that restricts transmission of an electric signal pattern associated with an input operation instructing execution of the input command to the terminal body.
3. The input restriction unit obtains an input time series pattern indicating a temporal change of the electric signal pattern associated with one input operation or a combination of a plurality of the input operations, and the input time series pattern is The terminal body of the electrical signal pattern included in the input time-series pattern when it deviates from a standard time-series pattern indicating a change over time of the electrical signal pattern assumed to occur as a result of human input operation The monitoring device according to claim 2, wherein transmission to the device is restricted.
4. The specified input operation is compared with a predetermined image extraction target input operation, and when the input operation matches the image extraction target input operation, the input operation is displayed on the monitor of the terminal device. The monitoring apparatus according to any one of claims 1 to 3, further comprising a monitor image recording unit that acquires an image and records the image on a recording medium.
5. The authentication process part which connects between the said terminal main body and the said input device when it authenticates correctly while performing the authentication process with respect to a user is further provided. Monitoring device.
6. The monitoring apparatus according to any one of claims 1 to 5, further comprising a light emission control unit that causes the lighting unit to emit light according to a timing when the input operation of the user is specified.
7. The monitoring apparatus according to claim 1, further comprising: a display control unit that causes a display unit to display information associated with the specified input operation.
8. The monitoring device according to any one of claims 1 to 7,
   The terminal device;
   With
   The terminal device
   A totaling system that performs a totaling process of tolls collected at a toll gate on a toll road as the information processing.
9. The main body connected to the terminal main body is connected between the terminal main body of the terminal device that performs information processing and an input device that sends an electric signal pattern associated with the input operation of the user toward the terminal main body A monitoring method using a monitoring device having a connection interface and a device-side connection interface connected to the input device,
   Identifying a user input action associated with the electrical signal pattern;
   Of the specified input operations, a step of recording a predetermined recording target input operation on a recording medium;
   Monitoring method.
10. The main body connected to the terminal main body is connected between the terminal main body of the terminal device that performs information processing and an input device that sends an electric signal pattern associated with the input operation of the user toward the terminal main body A monitoring device computer comprising: a connection interface; and a device-side connection interface connected to the input device.
    An input operation specifying unit for specifying the user's input operation related to the electrical signal pattern;
    Among the specified input operations, an input operation recording unit that records a predetermined recording target input operation on a recording medium,
    Program to function as.

Images