WO2022009611A1

WO2022009611A1 - Information processing device, program, and control method of information processing device

Info

Publication number: WO2022009611A1
Application number: PCT/JP2021/022430
Authority: WO
Inventors: 勝山本; 文誠山添; 雅之川井; 一徳砂子; 和也後藤; 昌平末永
Original assignee: 株式会社Jsol
Priority date: 2020-07-08
Filing date: 2021-06-14
Publication date: 2022-01-13
Also published as: JPWO2022009611A1; JP7077504B1; JP2022016441A

Abstract

Provided is a technology capable of suppressing a risk of information leakage.　An employee's terminal 100 of the present disclosure executes prescribed processes, when an imaging determination unit 104 determines that imaging device image data is included and a router determination unit 106 determines that an SSID of a wireless router of a connection destination does not correspond to an SSID of an allowed router. The prescribed processes include: a process for outputting a prescribed image signal; a process for limiting an output of the image signal; a process for notifying a manager's terminal; and a process for recording a log of the employee's terminal.

Description

Information processing equipment, programs, and control methods for information processing equipment

This disclosure relates to technology that suppresses the risk of information leakage.

In recent years, the places where employees work are not limited to the company, but the places where employees work tend to be ubiquitous, such as shared offices, conference rooms, trains, hotels, cafes, etc. In addition, the number of companies that recommend telework is increasing recently, and the opportunities for employees to work from home are also increasing.

In this way, as the places where employees work become ubiquitous, information leakage of image information (e-mail, confidential documents, drawings, etc.) displayed on information processing devices such as personal computers and mobile terminals used by employees The risks are increasing.

As a technology to deal with such an information leakage risk, the presence or absence of peeping by another person is determined by detecting the face image, and when it is determined that the peeping is by another person, the peeping countermeasure processing (viewing angle control) is performed. Those that perform filtering (turning on the filter, etc.) are disclosed (see, for example, Patent Document 1).

Further, as a technique for dealing with the risk of information leakage, Patent Document 2 describes information by transmitting image information and audio information taken by a camera provided in an information terminal to a server and analyzing the image information and audio information by the server. What determines the degree of leakage risk is disclosed (see, for example, Patent Document 2).

Japanese Unexamined Patent Publication No. 2010-128778 Japanese Unexamined Patent Publication No. 2019-117483

However, with the technology disclosed in these patent documents, it is possible to suppress the risk of information leakage due to the image information displayed on the information processing device being snooped by a third party, but the third party There was a problem that it could not be dealt with other than peeping.

This disclosure was made in view of the above circumstances, and aims to provide technology that can suppress the risk of information leakage.

In order to achieve the above object, the information processing apparatus of the present disclosure includes a display unit that displays an image according to a user's operation, and can transmit and receive information via a network by connecting to a router. The information processing apparatus is provided with a determination means for determining whether or not a predetermined event has occurred, and a control means for executing a predetermined process when it is determined that the predetermined event has occurred. To suppress the risk of information leakage.

In the information processing apparatus of the present disclosure, when it is determined that the predetermined event has occurred, the control means executes a process of outputting a predetermined image signal or a process of limiting the output of the image signal. Suppress the risk of information leakage.

In the information processing apparatus of the present disclosure, the control means suppresses the risk of information leakage by executing a process of notifying the administrator terminal when it is determined that the predetermined event has occurred.

In the information processing apparatus of the present disclosure, when it is determined that the predetermined event has occurred, the control means suppresses the risk of information leakage by executing a process of recording the log of the information processing terminal.

The information processing apparatus of the present disclosure includes a photographing means for photographing the user, the predetermined event is that the photographed image includes a photographing device image, and the determination means is said. When it is determined whether or not the captured image includes the photographing device image and it is determined that the captured image includes the photographing device image, the image corresponding to the operation of the user is not displayed. The risk of information leakage due to the image displayed on the information processing device being captured by the imaging device is suppressed.

In the information processing apparatus of the present disclosure, when the captured image includes the captured device image, the determination means determines whether or not the captured device image has a size larger than the size set for each photographing device. When it is determined that the size of the image of the photographing device is larger than the size set for each image of the photographing device, the image of the photographing device is determined by determining that the image of the photographing device includes the image of the photographing device. If the size is smaller than the set size, it is difficult to take an image displayed on the information processing apparatus. Therefore, the risk of information leakage is suppressed and the work efficiency of the user is not reduced.

In the information processing apparatus of the present disclosure, when the captured image includes the captured device image, the determination means has a locus of the captured device image included in the captured image captured a predetermined number of times within a set locus range. When it is determined whether or not the image is present and the locus of the image of the photographing device is within the set locus range, the image of the photographing device is obtained by determining that the image of the photographing device includes the image of the photographing device. When moving, there is no intention of taking an image displayed on the information processing device, so the risk of information leakage is suppressed and the work efficiency of the user is not reduced.

In the information processing apparatus of the present disclosure, when it is determined that the predetermined event has occurred, the control means is displayed on the information processing apparatus by changing the first image to the second image and displaying the image. It suppresses the risk of information leakage due to the image being taken by the photographing device.

In the information processing apparatus of the present disclosure, the predetermined event is that the router is connected to an unacceptable router whose use is not permitted, and the determination means is whether or not the router is an acceptable router whose use is permitted. When it is determined that the control means is the permissible router, the control means outputs an image signal to the outside, and when it is determined that the control means is not the permissible router, the control means includes a process of limiting the external output of the image signal. , Suppress the risk of information leakage due to the information processing device being connected to an unacceptable router.

In the information processing apparatus of the present disclosure, the control means is unacceptable by releasing the restriction on the external output of the image signal when a predetermined condition is satisfied in a state where the external output of the image signal is restricted. Even when connected to a router, for example, when the administrator or the like determines that there is no risk of information leakage, it is possible to remove the restriction on the external output of the image signal.

The program of the present disclosure is a program to be executed by an information processing apparatus having a display unit that displays an image according to a user's operation and capable of transmitting and receiving information via a network by connecting to a router. , Information processing by functioning as a determination means for determining whether or not a predetermined event has occurred and a control means for executing a predetermined process when it is determined that the predetermined event has occurred. Suppress the risk of information leakage in the device.

The control method of the information processing apparatus of the present disclosure includes a display unit that displays an image according to a user's operation, and controls an information processing apparatus capable of transmitting and receiving information via a network by connecting to a router. By executing a determination step for determining whether or not a predetermined event has occurred, and a control step for executing a predetermined process when it is determined that the predetermined event has occurred. , Suppress the risk of information leakage in information processing equipment.

According to this disclosure, it is possible to provide a technology capable of suppressing the risk of information leakage.

It is an overall system block diagram which concerns on embodiment of this disclosure. FIG. 3 is a block diagram showing a hardware configuration applicable to the employee terminal 100, the VDI server 200, and the management server 300 shown in FIG. 1. It is a block diagram which shows the functional structure of the employee terminal 100 and management server 300 shown in FIG. It is a figure which shows the example of the shooting determination. It is a figure which shows the example of the use allowable router determination. It is a flowchart which shows the example of the process in the employee terminal 100, the VDI server 200, and the management server. It is a flowchart which shows the example of the router authentication processing in the employee terminal 100. It is a flowchart which shows the example of the photographing detection processing in the employee terminal 100.

(Summary of this disclosure)
First, the outline of the present disclosure will be described.

The information leakage risk suppression technology of the present disclosure uses a camera equipped or connected to an information processing device such as a personal computer to capture an image of a camera owned by a third party or a photographing device such as a mobile terminal with a camera as a predetermined event. By detecting it, a predetermined process is executed. This predetermined process includes a process of outputting a predetermined image signal or a process of limiting the output of the image signal, a process of notifying the administrator terminal, a process of recording a log of the information processing terminal, and the like. ..

Further, the information leakage risk suppression technology of the present disclosure is to execute a predetermined process when the information processing apparatus is connected to a router other than the pre-registered allowable use router as a predetermined event.

Hereinafter, a mode for carrying out the present disclosure (hereinafter referred to as an embodiment of the present disclosure) will be described in detail with reference to the drawings.

(Overall system configuration)
Next, the overall system configuration according to the embodiment of the present disclosure will be described. FIG. 1 is an overall system configuration diagram according to an embodiment of the present disclosure. The overall system 10 according to the embodiment of the present disclosure is composed of a plurality of employee terminals 100, a VDI server 200, a management server 300, and a plurality of wireless routers A401 to EF404, which are information processing devices. One of the employee terminals 100 can be an administrator terminal.

Employee 1 terminal 100a, employee 2 terminal 100b, and employee 3 terminal 100c, which are employee terminals used by employees working in the company, are connected to the wireless router A401 installed in the company and are connected to the company network (for example, LAN). ) Is connected to the VDI server 200 and the management server 300.

Further, the employee 4 terminal 100d, which is an employee terminal used by an employee who works outside the company 1 (for example, at home), is connected to the wireless router AB402 installed at home, and is managed by the VDI server 200 via the Internet 500. Connected to the server 300.

Further, the employee 5 terminal 100e, which is an employee terminal used by an employee who has a meeting in an outside company 2 (for example, a conference room of another company), is connected to a wireless router CD403 installed in the other company and is connected to a VDI via the Internet 500. It is connected to the server 200 and the management server 300.

Further, the employee 6 terminal 100f, which is an employee terminal used by an employee who works in an external 3 (for example, a shared office), is connected to a wireless router EF404 installed in the shared office and is a VDI server via the Internet 500. It is connected to 200 and the management server 300.

The employee terminal 100 operates as a client that communicates with the VDI server 200 and the management server 300, respectively. The employee terminal 100 may be a notebook type personal computer, a desktop type personal computer, or a tablet computer. Further, the employee terminal 100 may be a thin client terminal.

The management server 300 has a function of authenticating whether the employee terminal 100 is legitimate and a function of transmitting information such as various data and various programs to the employee terminal 100 as needed. Further, the management server 300 has a function of managing business hours based on the operating time of the employee terminal 100 of each employee, a function of transmitting update information to the employee terminal 100, and a function of generating a one-time password to the employee terminal. It has a function of transmitting to 100. Further, the management server 300 may notify the administrator terminal when the user of the employee terminal 100 is an unspecified user or when the user receives the photographing device specific information taken by the photographing device. good.

The VDI server 200 functions as a server configured to provide a virtual desktop environment to the employee terminal 100 using a virtual desktop infrastructure (VDI). Although a plurality of techniques for realizing desktop virtualization for providing a virtual desktop environment are known, in the embodiment of the present disclosure, VDI will be used for description.

In order to provide a virtual desktop environment, the VDI server 200 receives various operation information on the employee terminal 100 and displays the image information on the screen of the employee terminal 100 and the image information corresponding to the updated part of the screen. To send. By displaying the screen corresponding to this image information on the employee terminal 100, the virtual desktop environment executed on the VDI server 200 can be used in the same manner as the desktop environment operating on the employee terminal 100. can. The status of work using the virtual desktop environment may be recorded. In particular, after detecting a predetermined event, the log of the employee terminal 100 may be stored.

The VDI server 200 is not an essential configuration in the overall system configuration according to the embodiment of the present disclosure. When the VDI server 200 is not used, a remote desktop environment is used by remotely connecting to a terminal inside the company (for example, an employee terminal 100 used for work in the company) from an external employee terminal 100. You may do so.

(Hardware configuration applicable to employee terminal 100, VDI server 200, and management server 300)
Next, the hardware configuration applicable to the employee terminal 100, the VDI server 200, and the management server 300 will be described. FIG. 2 is a block diagram showing a hardware configuration applicable to the employee terminal 100, the VDI server 200, and the management server 300 shown in FIG.

The CPU 701 performs integrated control of each device connected to the system bus 720. Further, the ROM 702 and the storage device 704 store a basic input / output system (BIOS) and an operating system (OS), which are control programs of the CPU 701. The ROM 702 and the storage device 704 store various programs and the like necessary for functioning as the employee terminal 100 in the case of the employee terminal 100, and are necessary for functioning as the VDI server 200 in the case of the VDI server 200. Various programs and the like are stored, and in the case of the management server 300, various programs and the like necessary for functioning as the management server 300 are stored. Further, in the case of the employee terminal 100, the log of the employee terminal 100 after detecting a predetermined event is stored in the storage device 704.

The RAM 703 functions as the main memory, work area, etc. of the CPU 701. The CPU 701 reads a program or the like necessary for executing various processes from the ROM 702 or the storage device 704 into the RAM 703, and executes the read program or the like to realize various operations.

The communication I / F (communication interface) 705 communicates with an external device via a network (LAN or Internet), and executes communication control processing (for example, communication using TCP / IP) on the network. ..

The camera (shooting means) 706 is provided, for example, above the surface on which the display (display unit) 711 is provided, and shoots an image on the operator side looking at the display 711. Further, the camera 706 is equipped with a wide-angle lens, and can capture images of the operator and the surroundings of the operator. The position where the camera 706 is provided may be any position as long as the operator and the image around the operator can be photographed.

The speaker 707 outputs various sounds, and the microphone 708 inputs the operator's voice and surrounding sounds. The input device 709 is a keyboard, a mouse, or the like.

The graphic board 710 outputs a video signal, and a display 711 is connected to it. Further, the graphic board 710 has a video output I / F (video output interface) 712 such as an HDMI (registered trademark) terminal and an analog RGB output terminal, and is a video device connected to the video output I / F 712. Output a video signal to (display, projector, etc.).

(Functional configuration of employee terminal 100 and management server 300)
Next, the functional configurations of the employee terminal 100 and the management server 300 will be described. FIG. 3 is a block diagram showing a functional configuration of the employee terminal 100 and the management server 300 shown in FIG.

The image input unit (shooting means) 101 transmits the image data taken by the camera 706 to the user authentication unit 102 and the shooting determination unit 104. Since the image input unit is set to transmit 10 image data per second, for example, the frame rate is 10 fps.

In the user face image data storage unit 103, the face image data and the face image data are associated with the user ID (user identifier) of each user (employee) who is permitted to use the employee terminal 100. User face image data including feature amount data showing features is stored.

The user determination unit (determination means) 102 specifies the face image data included in the image data received from the image input unit 101. Then, the specified face image data is collated with the user face image data stored in the user face image data storage unit 103, and the degree of matching in the user face image data is at least a predetermined level (for example, 80%). It is determined whether or not there is data that is. When it is determined that the user face image data contains data having a degree of matching of a predetermined level or higher, the face image data included in the image data received from the image input unit 101 can be used by the employee terminal 100. It is determined that the user's face image data is permitted, and the user identification information including the user ID associated with the user's face image data is transmitted to the leakage prevention control unit 109. The user determination unit 102 transmits the user determination result information to the leakage prevention control unit 109 at any time, that is, since the frame rate of the image input unit 101 is 10 fps, about 10 times per second. When the face image data cannot be specified from the image data received from the image input unit 101, the user determination unit 102 transmits the user unspecified information indicating that the face image data cannot be specified to the leakage prevention control unit 109. .. The user determination unit 102 may be an AI model based on AI (artificial intelligence) utilizing machine learning or the like. Then, in this case, for example, the AI model of the user determination unit 102 may be updated by the AI model transmitted from the management server 300 to the employee terminal 100.

The image data storage unit 105 for shooting determination contains a plurality of camera image data corresponding to each shape of a plurality of cameras as a shooting device, and a plurality of camera-equipped mobile terminal images corresponding to each shape of a plurality of camera-equipped mobile terminals. A plurality of image data of a plurality of photographing devices including data and the like are stored. Since the image data of the imaging device stored in the image data storage unit 105 for imaging determination gives priority to the detection speed by the imaging determination unit 104, the contour image data indicating the characteristics of the contour of the camera or the portable terminal with a camera is simplified. Image data.

The imaging determination unit (determination means) 104 reads the imaging device determination image data stored in the imaging determination image data storage unit 105, and the image data received from the image input unit 101 matches the imaging device determination image data. Determine if there is an image. When it is determined that there is data having a degree of matching with the image data for determining the photographing device at a predetermined level (for example, 60%) or more, the image data received from the image input unit 101 includes the image data of the photographing device. It is determined that it is.

Further, when the photographing determination unit 104 determines that the image data of the photographing device is included, the image data for the next time or later received from the image input unit 101 also matches the same image data for determining the photographing device as the previous time. Determine if there is an image. By executing such a determination a predetermined number of times (for example, a total of three times), the imaging determination unit 104 determines whether or not the same imaging device image data exists in each image data. Further, when the same image pickup device image data exists in each image data, it is determined whether or not the locus of the image pickup device image data is within the set range. Then, it was determined that the same image data of the imaging device exists in each image data, and that the locus of the image data of the imaging device is within the set range (for example, a region 1.2 times the size of the image data of the imaging device). In this case, it is determined that the screen of the employee terminal 100 may be photographed by the photographing device. When it is determined that the screen of the employee terminal 100 may be photographed by the photographing device, the photographing device specific information is transmitted to the leakage prevention control unit 109. If the locus of the image data of the photographing device exceeds the set range, it is determined that the photographing device does not intend to photograph the screen of the employee terminal 100 because the photographing device is moving.

The photographing determination unit 104 determines that the image data received from the image input unit 101 after the transmission of the photographing device specific information does not include an image matching the image data for determining the photographing device (the image data of the photographing device does not exist). If so, the image pickup device unspecified information is transmitted to the leakage prevention control unit 109. If the size of the image data of the photographing device included in the image data received from the image input unit 101 is smaller than the size (set number of pixels) set for each photographing device, the photographing determination unit 104 sets the employee terminal 100. Since it is difficult to shoot the screen of the camera, it is not determined that the image data of the shooting device is included. The photographing determination unit 104 may be an AI model based on AI (artificial intelligence) utilizing machine learning or the like. Then, in this case, for example, the AI model of the shooting determination unit 104 may be updated by the AI model transmitted from the management server 300 to the employee terminal 100.

The allowable use router data storage unit 107 stores the SSID (service set identifier) of the wireless router (allowable use router) to which the connection of the employee terminal 100 is permitted as the allowable use router data.

The router determination unit (determination means) 106 determines whether or not the SSID of the wireless router to which the employee terminal 100 is connected corresponds to the SSID of the allowable use router stored in the allowable use router data storage unit 107. When it is determined that the SSID of the wireless router to which the employee terminal 100 is connected corresponds to the SSID of the allowable use router, the permission router connection information including the SSID of the allowable use router and the user ID is transmitted to the leakage prevention control unit 109. .. Further, when it is determined that the SSID of the wireless router to which the employee terminal 100 is connected does not correspond to the SSID of the permitted use router, the leakage prevention of the unauthorized router connection information including the SSID of the unauthorized router and the user ID is prevented. It is transmitted to the control unit 109.

When the leak prevention control unit (control means) 109 receives the user unspecified information from the user determination unit 102 and receives the image pickup device specific information from the image pickup determination unit 104 as a predetermined event, the leak prevention control unit (control means) 109 is predetermined. A predetermined process such as a process of outputting an image signal or a process of limiting the output of an image signal, a process of notifying an administrator terminal, and a process of recording a log of an information processing terminal is executed. As a process of outputting a predetermined image signal, the leakage prevention control unit 109 changes the image signal to the display 711 from the current image signal (first image) to a screen saver image signal (second image) and outputs the image signal. It should be noted that the signal may be changed to a signal other than the screen saver image signal and output. You can also output a pop-up image. The leak prevention control unit 109 may notify the administrator terminal in the background when a predetermined event occurs. At this time, the leakage prevention control unit 109 may notify the administrator terminal without changing the information on the screen.
Further, when the photographing device specific information is received, the photographing detection information including the user ID is transmitted to the operating time management unit 301.

Further, when the leakage prevention control unit 109 receives the usage permission router connection information or the usage permission router connection information from the router determination unit 106, the leakage prevention control unit 109 transmits the operation information to the operation time management unit 301. Then, the SSID included in the licensed router connection information or the licensed router connection information is stored as the connection destination router information. If the newly received SSID of the licensed router connection information or the SSID included in the disallowed router connection information is different from the SSID of the connection destination router information stored, the newly received licensed router connection information or , The SSID included in the unauthorized router connection information is stored as new connection destination router information.

Further, when the leakage prevention control unit 109 receives the unusable router connection information from the router determination unit 106, the leakage prevention control unit 109 invalidates the video output I / F (external output) 712 in the video output unit 108 (stops the output of the video signal). do. In the leak prevention control unit 109, the one-time password transmitted from the password input unit 110 after the video output I / F 712 in the video output unit 108 was invalidated matched the one-time password received from the password generation unit 309 described later. In this case, the video output I / F 712 in the video output unit 108 is enabled (the output of the video signal is allowed).
When the leakage prevention control unit 109 receives the unusable router connection information from the router determination unit 106, it outputs another image signal so as to change the image signal to the display 711 from the current image signal to the screen saver image signal. You may do it. A pop-up image may be output. Further, the administrator terminal may be notified via the management server 300. Further, the log of the target employee terminal 100 may be recorded so that the analysis can be performed later.

The operating time management unit 301 manages the operating time of the employee terminal 100 based on the operation information, the shooting detection information, the cancellation information, etc. received from the leak prevention control unit 109. When the operation of the employee terminal 100 is completed, the operating time management unit 301 stores the operating time of the employee terminal 100 in the operating time storage unit 302.

When the user face image data update unit 303 determines whether or not the user face image data registered in the user face image data registration unit 304 has been updated and determines that the user face image data has been updated, the user face image data update unit 303 determines whether or not the user face image data has been updated. The updated user face image data (new user face image data) is transmitted to the leakage prevention control unit 109. When the leakage prevention control unit 109 receives new user face image data from the user face image data update unit 303, the leak prevention control unit 109 uses the user face image data stored in the user face image data storage unit 103 as the new user face. Update to image data.

When the shooting determination data update unit 305 determines whether or not the shooting device determination image data registered in the shooting determination image data registration unit 306 has been updated, and determines that the shooting device determination image data has been updated. , The updated image data for determining the photographing device (new image data for determining the photographing device) is transmitted to the leakage prevention control unit 109. When the leakage prevention control unit 109 receives new image data for image determination for image capture from the image data update unit 305 for image determination, the leak prevention control unit 109 uses the image data for image image determination for image capture stored in the image data storage unit 105 for image determination as a new image device. Update to the image data for judgment.

The permissible use router update unit 307 determines whether or not the permissible use router data registered in the permissible use router registration unit 308 has been updated, and if it is determined that the permissible use router data has been updated, the updated permissible use router has been updated. Data (new usage allowable router data) is transmitted to the leakage prevention control unit 109. When the leakage prevention control unit 109 receives new use-allowed router data from the use-allowed router update unit 307, the leak-prevention control unit 109 updates the use-allowed router data stored in the use-allowed router data storage unit 107 with new use-allowed router data.

When the password generation unit 309 receives a one-time password generation request from an external terminal (for example, an employee terminal 100 used by an administrator (superior) or the like), the password generation unit 309 generates a one-time password and generates the one-time password. Is transmitted to the leakage prevention control unit 109 and the external terminal. The leak prevention control unit 109 matches the one-time password received from the password generation unit 309 with the one-time password received from the password input unit 110 (for example, the one-time password transmitted from the administrator or the like and input by the user). Judge whether or not. When the one-time passwords match, the leakage prevention control unit 109 stores the SSID of the unusable router as the SSID of the router for which temporary use is permitted (temporary use permitted router).

(Example of shooting judgment)
Next, an example of shooting determination will be described. FIG. 4 is a diagram showing an example of shooting determination.

FIG. 4A shows an example in which it is determined that the screen of the employee terminal 100 may be imaged by the photographing device. As shown in this figure, the camera-equipped portable terminal image G01 (or camera image G02) is larger than the size set for each photographing device around the user image, and the camera-equipped portable terminal image G01 (or camera) is used. When it is determined that the locus of the image G02) is within the set range, it is determined that the screen of the employee terminal 100 may be imaged by the photographing device. Then, when it is determined that the screen of the employee terminal 100 may be imaged by the photographing device, the screen saver image is displayed. Instead of changing the display from the first image to the second image as in the screen saver image, another image may be superimposed and displayed on the current image as in the pop-up image. Image (video) output may be blocked. Further, the administrator terminal may be notified or the log of the target employee terminal 100 may be recorded. Further, for example, when a predetermined release process or the like is performed, the normal state is set.

FIG. 4B shows an example in which it is determined that there is no possibility that the screen of the employee terminal 100 is imaged by the photographing device. As shown in this figure, when it is determined that the camera-equipped mobile terminal image G01 (or camera image G02) is smaller than or equal to the size set for each photographing device around the user image, or the camera-equipped mobile terminal image G01. (Or, even if the size of the camera image G02 is larger than the size set for each shooting device, if it is determined that the trajectory of the camera-equipped portable terminal image G01 (or camera image G02) exceeds the set range, the shooting device determines. It is determined that there is no possibility that the screen of the employee terminal 100 will be imaged.

(Example of allowable router judgment)
Next, an example of determining the allowable router will be described. FIG. 5 is a diagram showing an example of determination of an allowable router.

FIG. 5A shows an example when connecting to a wireless router registered in the allowable use router data. As shown in this figure, when it is determined that the wireless router to which the employee terminal 100 is connected is the wireless router A401 registered in the allowable use router data, the video output to the outside is enabled (ON).

FIG. 5B shows an example when connecting to a wireless router that is not registered in the allowable router data. As shown in this figure, when the wireless router to which the employee terminal 100 is connected is the wireless router AB402 which is not registered in the allowable router data, the video output to the outside is invalidated (OFF). Then, when the video output to the outside is invalidated (OFF), a one-time word is input, and when the input one-time password is authenticated, the video output to the outside is enabled. In this way, instead of limiting the video output, another image may be displayed instead of the current image, or another image may be displayed overlaid on the current image. Further, the administrator terminal may be notified or the log of the target employee terminal 100 may be recorded. In this case as well, the display of another image may be terminated by inputting the one-time password.

(Example of processing in employee terminal 100, VDI server 200, and management server)
Next, an example of processing in the employee terminal 100, the VDI server 200, and the management server will be described. FIG. 6 is a flowchart showing an example of processing in the employee terminal 100, the VDI server 200, and the management server.

First, the login process is executed on the employee terminal 100 (S101). In this login process, the user is photographed, and the user's face image authentication is executed by collating the face image data specified from the photographed image data with the user's face image data.

Subsequently, it is determined whether or not the user's face image has been authenticated in the login process (S102). If it is determined that the user's face image has been authenticated, the process proceeds to S103. On the other hand, if it is determined that the user's face image is not authenticated, the process proceeds to S101.

If it is determined in S102 that the user's face image has been authenticated, the employee terminal 100 is connected to the wireless router in S103 (router connection at login).

Subsequently, when the employee terminal 100 is connected to the VDI server 200, user authentication (user authentication) is executed in the VDI server 200. When the user is authenticated, the VDI server 200 selects the virtual desktop environment of the authenticated user and transmits screen data corresponding to the virtual desktop environment to the employee terminal 100. After that, the input data input by the input device 709 of the employee terminal 100 is transmitted to the VDI server 200, and the VDI server 200 receiving the input data transmits the screen data corresponding to the input data. On the employee terminal 100, the screen data transmitted from the VDI server 200 is updated and displayed.

Further, when the employee terminal 100 is connected to the management server 300, the management server 300 starts measuring the operating time of the employee terminal 100. When the management server 300 has updated data (updated user face image data, updated photographing device determination image data, updated usable allowable router data), the management server 300 transmits the updated data to the employee terminal 100. When the employee terminal 100 receives the update data, the employee terminal 100 executes the update process of the corresponding data.

Next, check the SSID of the wireless router to connect to (S104).

Subsequently, the employee terminal 100 determines whether or not the connected wireless router is a new wireless router. Further, it is determined whether or not the one-time password (OTP) is received from the management server 300 (S105). Here, it is determined whether or not the wireless router is a new one by determining whether or not the SSID is the same as the SSID of the connection destination router information stored in the leakage prevention control unit 109. If the connection destination router information is not stored in the leakage prevention control unit 109, it is determined that the wireless router is a new one. If it is determined that the connected wireless router is a new wireless router or has received the one-time password from the management server 300, the process proceeds to S106. On the other hand, if it is determined that the connected wireless router is not a new wireless router or the one-time password has not been received from the management server 300, the process proceeds to S107.

If it is determined that the wireless router connected in S105 is a new wireless router or has received the one-time password from the management server 300, the router determination process is executed (S106).

Here, the router determination process will be described. FIG. 7 is a flowchart showing an example of router authentication processing in the employee terminal 100.

In the router determination process, first, it is determined whether or not the wireless router is permitted to be used (S1061). If it is determined that the wireless router is permitted to be used, the process proceeds to S1062. On the other hand, if it is determined that the wireless router is not permitted to be used, the process proceeds to S1063.

If it is determined in S1061 that the wireless router is permitted to be used, the connection destination router information is stored (S1062).

If it is determined in S1061 that the wireless router is not permitted to be used (it is a router not permitted to be used), the video output is invalidated (OFF) (S1063).

Subsequently, the connection destination router information is stored (S1064).

Subsequently, it is determined whether or not the one-time password has been entered (S1065). If it is determined that the one-time password has been input, the process proceeds to S1066. On the other hand, if it is determined that the one-time password has not been entered, the router determination process is terminated.

If it is determined in S1055 that the one-time password has been input, the one-time password is authenticated (S1066). Here, after it is determined in S1051 that the wireless router is not permitted to be used, the one-time password transmitted from the management server 300 has been received (see FIG. 6), and the one-time password has been received by the user. Is already entered, the one-time password received from the management server 300 and the one-time password entered by the user are authenticated.

Subsequently, it is determined whether or not the one-time password has been authenticated (S1067). If it is determined that the one-time password has been authenticated, the process proceeds to S1068. On the other hand, if it is determined that the one-time password is not authenticated, an authentication error is displayed and then the router determination process is terminated.

After storing the connection destination router information in S1062, or when it is determined in S1067 that the one-time password has been authenticated, the video output is enabled (ON) (S1068), and then the router determination process is terminated. In FIG. 7, the leakage prevention control unit 109 has described an example in which the output of the image signal is restricted and the restriction is released by the password when the router is not a licensed router. However, when a predetermined event occurs. , A predetermined image signal may be output, and the restriction may be lifted with a password. Further, if the leak prevention control unit 109 is not a licensed router, the administrator terminal may be notified and the log of the target employee terminal 100 may be recorded.

Returning to FIG. 6, when the router determination process is completed in S106, the shooting determination process is subsequently executed (S107).

Here, the shooting determination process will be described. FIG. 8 is a flowchart showing an example of shooting detection processing in the employee terminal 100.

In the shooting determination process, first, the shot image data is confirmed (S1071).

Subsequently, it is determined whether or not the captured image data includes the imaging device image data (S1072). If it is determined that the captured image data includes the captured image data, the process proceeds to S1073. On the other hand, if it is determined that the captured image data does not include the captured image data, the process proceeds to S1081.

When it is determined in S1072 that the captured image data includes the capture device image data, whether or not the size (number of pixels) of the image (shooting device image data) is equal to or larger than the size (set size) set for each photographing device. (S1073). If it is determined that the size of the image data of the photographing device is equal to or larger than the size set for each photographing device, the process proceeds to S1074. On the other hand, if it is determined that the size of the image data of the photographing device is not larger than the size set for each photographing device, the process proceeds to S1081.

When it is determined in S1073 that the size of the image data of the photographing apparatus is equal to or larger than the size set for each photographing apparatus, it is determined whether or not the value of the photographing determination counter DC (hereinafter referred to as DC) is 0 (S1074). If it is determined that the DC value is 0, the process proceeds to S1075. On the other hand, if it is determined that the DC value is not 0, the process proceeds to S1076.

When it is determined in S1074 that the DC value is 0, the locus range is set (S1075). Here, in consideration of camera shake by the photographer, for example, a region having a size 1.2 times the size of the image data of the photographing apparatus is set in the locus range.

Subsequently, it is determined whether or not the image (shooting device image data) is within the set locus range (within the set locus range) (S1076). When the DC value is 0, it is naturally determined that the image data of the photographing apparatus is within the set locus range. If it is determined that the image data of the photographing apparatus is within the set locus range, the process proceeds to S1077. on the other hand. If it is determined that the image data of the photographing apparatus exceeds the set locus range, the process proceeds to S1081.

When it is determined in S1076 that the image data of the photographing apparatus is within the set locus range, the DC value is added by 1 (S1077).

Subsequently, it is determined whether or not the DC value is 3 (S1078). If it is determined that the DC value is 3 or more, the process proceeds to S1079. On the other hand, if it is determined that the DC value is not 3 or more (1 or 2), the process proceeds to S1072.

When it is determined in S1078 that the DC value is 3 or more, a predetermined image signal is output and a screen saver image is displayed (S1079).

Subsequently, the shooting detection information is transmitted to the management server 300 (S1080). When the shooting detection information is transmitted to the management server 300, the shooting determination process ends. When the management server 300 receives the above-mentioned shooting detection information, the management server 300 suspends the measurement of the operating time. Then, when a predetermined release process or the like is performed, the measurement of the paused operating time is restarted (see FIG. 6). By transmitting the shooting detection information to the server 300, it is possible to notify the administrator terminal that a predetermined event of leakage has occurred. Further, at the same time as transmitting the shooting detection information to the management server 300, the log of the target employee terminal 100 may be stored in the storage device 704.

When it is determined in S1072 that the captured image data does not include the imaging device image data, when it is determined in S1073 that the size of the imaging device image data is not larger than the size set for each imaging device, or in S1076, the imaging device is determined. When it is determined that the image data exceeds the set locus range, it is determined whether or not the DC value is 1 or more (S1081). If it is determined that the DC value is 1 or more, the process proceeds to S1082. On the other hand, when it is determined that the DC value is not 1 or more (0), the shooting determination process is terminated.

If it is determined in S1081 that the DC value is 1 or more, the DC value is set to 0 (reset). Further, the setting of the locus range is cleared (S1082). When the DC value is set to 0 and the locus range setting is cleared, the shooting determination process ends.

Returning to FIG. 6, when the shooting determination process is completed in S107, it is subsequently determined whether or not to log out (S108). If it is determined to log out, the process proceeds to S109. On the other hand, if it is determined not to log out, the process proceeds to S104.

If it is determined in S108 to log out, the logout process is executed (S109). Here, when the logout process is executed, the logout information is transmitted from the employee terminal 100 to the VDI server 200. Upon receiving the logout information, the VDI server 200 deselects the virtual desktop environment of the user of the employee terminal 100.

Further, when the logout process is executed, the logout information is also transmitted from the employee terminal 100 to the management server 300. The management server 300 that has received the logout information ends the measurement of the operating time of the employee terminal 100.

When the logout process is completed in S109, the process in the employee terminal 100 is completed.

Although the embodiments of the present disclosure have been described above, the information acquisition device according to the present disclosure is not limited to the above-described embodiments, and various within the scope of the gist of the present disclosure described in the claims. Can be transformed and changed.

In the embodiment of the present disclosure, when the leakage prevention control unit 109 receives the user unspecified information from the user determination unit 102 and receives the image pickup device specific information from the image pickup determination unit 104, the leak prevention control unit 109 is displayed on the display 711. The image signal was changed from the current image signal to the screen saver image signal and output. However, the present invention is not limited to this, and an image signal other than the screen saver image signal may be changed and output. Further, another image signal such as a pop-up image may be superimposed and displayed on the display 711. Further, the output of the image signal may be stopped. Further, the video output I / F 712 in the video output unit 108 may be invalidated. The leak prevention control unit 109 notifies the administrator terminal via the server 300 when the user unspecified information is received from the user determination unit 102 and when the photographing device specific information is received from the photographing determination unit 104. You may do so. Further, the log of the target employee terminal 100 may be recorded so that the analysis can be performed later.

Further, in the embodiment of the present disclosure, the leakage prevention control unit 109 invalidates the video output I / F 712 in the video output unit 108 when the unusable router connection information is received from the router determination unit 106. However, the present invention is not limited to this, and another image signal may be output so as to change the image signal to the display 711 from the current image signal to the screen saver image signal. Further, when the leakage prevention control unit 109 receives the unusable router connection information from the router determination unit 106, the leak prevention control unit 109 may notify the administrator terminal via the management server 300. Further, another image signal such as a pop-up image may be superimposed and displayed. Further, the log of the target employee terminal 100 may be recorded so that the analysis can be performed later.

Further, in the embodiment of the present disclosure, the management server 300 is provided with a password generation unit 309, and when a one-time password generation request is received from an external terminal, the one-time password is generated and the generated one-time password is controlled to prevent leakage. It was supposed to be transmitted to the unit 109. However, the present invention is not limited to this, and the password generation unit 309 may not be provided in the management server 300. In this case, it is conceivable to send the one-time password generated (or created by the administrator) on the external terminal to the employee terminal 100. Alternatively, the administrator terminal may perform a process of releasing the restriction on the external output of the image signal to the administrator server 300.

Further, in the embodiment of the present disclosure, the connection form of the employee terminal 100, the VDI server 200, and the management server 300 is a wireless connection or a wired connection, but the connection form may be a wireless connection, and the connection form may be a wireless connection. It may be a wired connection.

Further, in the embodiment of the present disclosure, the connection destination is specified from the SSID of the wireless router. However, the present invention is not limited to this, and the connection destination may be specified by the host name or the device identifier (for example, MAC address, BD address, etc.). Further, it may be determined whether or not to allow the connection destination from the combination of the unique code (for example, a password or the like) and the identifier.

Further, in the embodiment of the present disclosure, when it is determined that the DC value is 3 or more, it is detected as shooting by a shooting device (see S1078). However, the present invention is not limited to this, and the DC value may be a value of 3 or more. Further, the DC value may be variable. Further, the frame rate of the image data to be used for the shooting determination may be variable.

10 Overall system 100 (100a-100f) Employee terminals (1 employee terminal to 6 employee terminals)
200 VDI server 300 Management server 401-404 Wireless router A-Wireless router EF
500 Internet 701 CPU
702 ROM
703 RAM
704 Storage device 705 Communication I / F
706 Camera 707 Speaker 708 Microphone 709 Input device 710 Graphic board 711 Display 712 Video output I / F

Claims

An information processing device that has a display unit that displays images according to user operations and can send and receive information via a network by connecting to a router.
Judgment means for determining whether or not a predetermined event has occurred,
When it is determined that the predetermined event has occurred, the control means for executing the predetermined process and the control means.
An information processing device characterized by being equipped with.
When it is determined that the predetermined event has occurred, the control means executes a process of outputting a predetermined image signal or a process of limiting the output of the image signal.
The information processing apparatus according to claim 1.
The control means executes a process of notifying the administrator terminal when it is determined that the predetermined event has occurred.
The information processing apparatus according to claim 1.
When the control means determines that the predetermined event has occurred, the control means executes a process of recording a log of the information processing terminal.
The information processing apparatus according to claim 1.
A shooting means for shooting the user is provided.
The predetermined event is that the captured image includes a capture device image.
The determination means is
Determining whether or not the captured image includes an image of a photographing device.
The information processing apparatus according to any one of claims 1 to 4.
The determination means is
When the captured image includes the imaging device image, it is determined whether or not the photographing device image has a size larger than the size set for each imaging device.
The fifth aspect of claim 5 is characterized in that when it is determined that the image of the photographing device is larger than the size set for each of the photographing devices, it is determined that the image of the photographing device includes the image of the photographing device. Information processing equipment.
The determination means is
When the captured image includes the capture device image, it is determined whether or not the trajectory of the capture device image included in the captured image captured a predetermined number of times is within the set trajectory range.
The information processing according to claim 5 or 6, wherein when it is determined that the locus of the image of the photographing device is within the set locus range, it is determined that the image of the photographing device includes the image of the photographing device. Device.
When the control means determines that the predetermined event has occurred, the control means changes the first image to the second image and displays it.
The information processing apparatus according to any one of claims 2 or 5 to 7, wherein the information processing apparatus is characterized by the above.
The predetermined event was that the connection was made to an unacceptable router that was not allowed to be used.
The determination means is
Determining if the router is an acceptable router for which use is permitted,
The control means is
When it is determined that the router is the allowable router, the image signal is output to the outside, and when it is determined that the router is not the allowable router, the process of limiting the external output of the image signal is included.
The information processing apparatus according to any one of claims 1 to 8, wherein the information processing apparatus is characterized.
The control means is
The information processing apparatus according to claim 9, wherein when a predetermined condition is satisfied in a state where the external output of the image signal is restricted, the restriction on the external output of the image signal is released.
It is a program that has a display unit that displays images according to the user's operation and is executed by an information processing device that can send and receive information via a network by connecting to a router.
Judgment means for determining whether or not a predetermined event has occurred,
When it is determined that the predetermined event has occurred, the control means for executing the predetermined process and the control means.
A program characterized by making it work.
It is a control method of an information processing device that has a display unit that displays an image according to the user's operation and can send and receive information via a network by connecting to a router.
A determination step for determining whether or not a predetermined event has occurred, and
When it is determined that the predetermined event has occurred, the control step for executing the predetermined process and
A control method for an information processing device, which is characterized by executing.