JP4513837B2 - Application usage monitoring system, application usage monitoring method, and application usage monitoring program - Google Patents

Description

  The present invention relates to a technique for monitoring application use by employees, workers, and students in a computer lesson at a company office or educational institution, and in particular, uses an application that should be restricted such as a game or the like during work or class. The present invention relates to an application usage monitoring system, method, and program that can prevent this.

  As an action management system for efficiently and highly accurately managing the actions of a user who uses a client computer, the client computer monitors the operation contents of the user and the output means for outputting the obtained log information to the server computer; And a restricting means for restricting the use of the user from the restricting information obtained from the administrator terminal, and the server computer extracts the information from the log information based on a preset condition, and the extracting means There has been proposed a system having change detection means for detecting a change in operation content for each client computer from obtained information, and notification means for notifying an administrator terminal of an analysis result obtained by the change detection means (for example, a patent) Reference 1).

  In addition, based on the policy information, the first analysis unit that detects the monitoring target operation from the operation of the software being executed, and the operation detected by the first analysis unit are recorded in the execution history recording unit. There has also been proposed a system including a second analysis unit that analyzes an execution history and determines whether or not there is a deviation from the normal operation of software (see, for example, Patent Document 2).

  In this way, if the start log of the application of the client computer is managed on the server side, even if the user of the client computer is playing a game during work, the operation of the application of the game is detected based on the log information and should be appropriate Warning notification can be performed. However, the number of such game software is very large, and continuing to check whether or not the activated applications of all client computers in the company are applicable to the game software places an excessive burden on the system. In addition, even the same application cannot be detected when the file name or registry information is changed, or when the information such as the file name changes due to version upgrade or the like.

JP 2005-332345 A JP 2006-53788 A

  Therefore, in view of the above-mentioned situation, the present invention intends to solve the problem efficiently and accurately without imposing an excessive burden of checking application activation on all client computers based on log information. The object is to provide a computer operation monitoring system, method, and program capable of detecting a non-business operation such as a game and issuing a warning notification.

  In order to solve the above-mentioned problems, the present invention provides a sound data feature information storage unit that stores sound data feature information that allows each computer to specify each application for sound output when using a plurality of applications outside work, Sound output information acquisition means for acquiring sound output information of an application used in the computer, and for the acquired sound output information, refer to the sound data feature information of the sound data feature information storage means, and A determination unit that determines whether or not the sound is output; and a notification unit that notifies a predetermined person when the determination unit determines that the sound is output from an application outside of work. An application usage monitoring system characterized by the above was constructed.

  The present invention also relates to an application usage monitoring system comprising a plurality of client computers and a supervisor computer that is communicatively connected to the client computer. Sound data feature information storage means for storing sound data feature information for identifying each application, and sound output information for receiving sound output information of the application used in the client computer from each of the client computers connected for communication For the received sound output information, with reference to the sound data feature information in the sound data feature information storage means, a determination means for determining whether or not the sound is output from an application outside the business, and the determination means The sound of the application Notification means for notifying a predetermined person to that effect when it is determined that the client computer obtains sound output information when the application is used. There is provided an application usage monitoring system comprising sound output information transmitting means for transmitting to a computer.

  Further, the present invention provides a system comprising a plurality of client computers and a supervisor computer connected to the client computer, wherein the monitor computer outputs each application for sound output when using a plurality of applications outside business. Sound data feature information storage means for storing the sound data feature information that can identify each of the sound data, and the client computer acquires sound output information when the application is used, and transmits the sound output information to the monitor computer. Output information transmitting means, and the supervisor computer receives from each client computer connected for communication the procedure for receiving the sound output information of the application used in the client computer, and the received sound output information The sound The sound data feature information in the data feature information storage means, and a procedure for determining whether or not the sound is output from an application outside the business, and if the determination determines that the sound output is from an application outside the business, There is also provided an application usage monitoring method characterized by comprising a procedure for notifying a predetermined person to that effect.

  The present invention also provides sound data feature information storage means for storing sound data feature information capable of specifying each application for sound output when using a plurality of applications outside the business in the application usage monitoring system. , Sound output information acquisition means for acquiring sound output information of the application used in the computer, referring to the sound data feature information of the sound data feature information storage means for the acquired sound output information, A determination unit that determines whether or not the sound is output; and, when the determination unit determines that the sound output is from an application other than a job, the function serves as a notification unit that notifies a predetermined person to that effect An application usage monitoring program is also provided.

  The present invention further includes sound output information transmission means for the client computer to acquire sound output information when the application is used and transmit the sound output information to the monitor computer. The sound data feature information storage means for storing the sound data feature information capable of specifying each application for the sound output when using a plurality of applications outside the business, and each client computer connected in communication From the sound output information receiving means for receiving the sound output information of the application used in the client computer, referring to the sound data feature information in the sound data feature information storage means for the received sound output information, Whether the sound output of the application A determination means for determining, and an application usage monitoring program that functions as a notification means for notifying a predetermined person when it is determined by the determination means that the sound is output from a non-business application Also provide.

  According to the present invention as described above, since the application is specified based on the sound output information of the application being used, it is possible to efficiently and accurately detect an application other than business such as a game. There is no need to check the application based on log information, and a monitoring system with a very low burden can be realized. The person who is playing a game or the like can be identified as a person who needs attention and can be continuously monitored.

  In addition, the file name of the application may change due to version upgrades, etc., but the sound output is rarely changed when a new game (such as a sequel or series) comes out, so this sound output Based on the above, applications outside of work can be detected more reliably regardless of changes in file names, etc., and unauthorized use of applications can be widely checked.

  The client computer stores application information at the time of obtaining the sound output information, and forcibly terminates the application having the same application name as the application information included in the stored application information by receiving an application forced termination command from the supervisor computer. Therefore, the application can be forcibly terminated efficiently and efficiently on the client computer.

  In addition, when the determination unit determines that the sound output is from an application outside the business, the application is newly registered in the activation prohibited application information storage unit. Therefore, in the case of an application whose file name has been changed due to version upgrade, etc. In addition, it becomes possible to quickly and beforehand limit the use of the application to all client computers.

  Further, the client computer includes screen information transmission means for transmitting screen display information at the time of acquisition of the sound output information to the monitoring computer, and the notification means displays the received screen display information on the screen display of another client computer. Since the information is displayed in a form different from the information, it is possible to notify the monitor of the monitor computer in detail and grasp the contents of the application used by the client computer, and should the use be really restricted? Whether or not it is possible to actually check visually on the window screen or the like of the application can be avoided.

  Next, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 is a diagram showing the overall configuration of an application usage monitoring system according to the present invention, in which FIGS. 1 to 5 show typical embodiments, in which reference numeral 1 denotes a supervisor computer and 2 denotes a client computer. Yes. As shown in FIG. 1, the application use restriction system S of the present invention is composed of one or a plurality of client computers 2... And a supervisor computer 1 connected thereto via a communication network N. In the following embodiment, a system for monitoring between a plurality of computers, ie, the supervisor computer 1 and the client computer 2, will be described. However, the computer operation is monitored in a single computer. Of course.

  As shown in FIG. 2, the supervisor computer 1 is composed of a single computer or a plurality of computers. As shown in FIG. 2, a display unit such as a storage device 11, a communication control unit 12, and an input operation unit 13 such as a pointing device and a keyboard are displayed. 14 can be used, and the processing device 10 is mainly composed of a CPU such as a microprocessor, and has a storage unit consisting of a RAM and a ROM (not shown) for various processing operations. A program for defining the procedure and processing data are stored.

  The processing device 10 functionally includes a sound output information reception processing unit 10a that receives sound output information of an application used from each client computer, and a sound data feature information storage of the storage unit 11 for the received sound output information. If the judgment processing unit 10b refers to the sound data feature information of the unit 11a and determines whether or not the sound is output from an application outside the business, and the judgment processing unit 10b determines that the application is out of business, the application is used for the client computer. Information processing processing unit 10c for transmitting processing information that restricts the application, and an application registration processing unit that newly registers the application in the startup prohibited application information storage unit 11c when the determination processing unit 10b determines that it is out of business. 10d and the screen received from each client computer At least a screen display processing unit 10e for displaying the display information on the display, and a notification processing unit 10f for notifying a predetermined person when the determination processing unit 10b determines that the information is out of business. These functions are realized by the above program.

  The storage means 11 is composed of a hard disk or the like inside or outside the supervisor computer 1, and includes a sound data feature information storage unit 11a for storing sound data feature information for specifying an application outside the business, and sound output information received from each client computer. Is provided at least with a sound output history storage unit 11b for storing and an activation prohibition application information storage unit 11c in which application information for prohibiting activation is registered. These storage means 11 include, of course, a case of storing in a temporary storage area in addition to the hard disk and the like.

  Specifically, the sound data feature information storage unit 11a uses, as shown in the solid line graph of FIG. 4, for example, a high tone point and a low tone point as the high / low tone feature of the sound output of the application outside the business. The characteristic information extracted and graphed together with the time information is stored, and the determination processing unit 10b also outputs high / low sounds for the sound output information received from the client computer 2 as shown by the broken line in FIG. By comparing the waveform over time with the characteristic information of the solid line, it can be determined whether the application is out of business. As described above, the sound output information acquired by the client computer 2 and transmitted to the supervisor computer 1 includes, for example, sound transmitted from an application to be used to an audio driver or an audio device (for example, a WAVE device) in each client computer. Data and information on the frequency waveform of the sound obtained by acquiring sound data output from the audio driver or audio device are included, but it is also preferable to include information such as the type of sound.

  As a method for determining coincidence / mismatch by comparing such sound output information with characteristic sound data, a known sound recognition technique can be used, for example, a technique disclosed in Japanese Patent Application Laid-Open No. 2004-21233. Is applied to detect the maximum and minimum values of each pitch that make up the sound output information, as well as to detect the average value of the pitch and to detect the maximum and minimum values of the detected pitch. For example, it is possible to widely adopt a known method such as determining whether or not the sound feature information matches or approximates based on the average value of the sound length.

  The sound output history storage unit 11b stores a history of sound output information received from the client computer. The sound output information history is managed by the client computer, and the supervisor computer 1 has a predetermined timing. The history information or the processed sound output information may be received from the client computer.

  In addition, the activation prohibited application information storage unit 11c is where applications that are prohibited from being activated because they should not be used by the client computer 2 are registered, and the application information registered in the storage unit is stored in all the client computers 2 In this case, not only the client computer that has transmitted the sound output information because the application is used but also the other client computers 2 can be prohibited in advance from starting the application. That is, if a client computer uses an application that should be restricted in use, it is possible to prevent other client computers from starting the application in advance, thereby preventing the use. In this case, information (list) of activation prohibited applications registered in the activation prohibited application information storage unit 11c may be transmitted to all client computers and shared. Further, when each client computer 2 accesses and uses an application in the server, the use of the application in the server may be rejected based on the information in the activation prohibited application information storage unit 11c.

  If the determination processing unit 10b determines that the notification processing unit 10b is out of business, the notification processing unit 10f displays a predetermined notification to the monitor with a pop-up or the like along with information on the client computer using the application and information on the application. The predetermined warning / notification sound can be output to the speaker. In this example, the monitoring computer further receives the screen display information at the time of obtaining the sound output information from each client computer, and displays the received screen display information in a form different from the screen display information of other client computers. . As another example, screen display information at the time of using an application in each client computer 2 is transmitted from each client computer to the supervisor computer 1 regardless of the result of the determination, and the monitor computer 1 displays the screen information of each client computer. When it is determined that an application outside the business is being used as a result of the determination, the monitor computer 1 displays the screen display information when the application is used on the client computer. It is also a preferred embodiment to notify the supervisor of unauthorized use in a form other than the display information, for example, in an enlarged display. Further, when the computer operated by the supervisor is different from the supervisor computer 1 or when notifying a third party, information about the client computer, application, etc. is notified using e-mail or the like. It is preferable to do.

  In this example, as shown in FIG. 1, an example in which the monitoring computer 1 is configured by providing a processing unit of a single computer and the storage unit 11 with these functions and a storage unit is described. Thus, these functions and the storage unit may be shared. In addition, the supervisor computer 1 is not necessarily a fixed computer, and it is of course possible to designate any one of a plurality of computers connected for communication as the supervisor computer and allow other computers to function as client computers. it can.

  As shown in FIG. 3, each client computer 2 has been widely used conventionally, with a processing unit 20 as a center, a storage unit 21, a communication control unit 22, an input operation unit 23 such as a mouse and a keyboard, and a display 24. The processing device 20 is mainly composed of a CPU such as a microprocessor, and has a storage unit including a RAM and a ROM (not shown) and stores programs and processing data for defining various processing operation procedures. The

  The processing device 20 acquires sound output information when the application is used, and transmits the sound output information transmission processing unit 20a that transmits the sound output information to the supervisor computer 1 and the application information when the sound output information is acquired as an application information storage unit. Application information storage processing unit 20b for temporarily storing in 21a, and screen information storage processing unit for recording screen display information of display 24 when sound output information is acquired and temporarily storing it in screen information storage unit 21b 20c, a use restriction processing unit 20d that executes a predetermined use restriction process based on the handling information received from the supervisor computer 1, and screen display information recorded in the screen information storage unit 21b by receiving the handling information At least a screen information transmission processing unit 20e for transmitting the information to the supervisor computer 1, Function is realized by the program.

  The storage means 21 includes hard disks and the like inside and outside the client computer 2, and stores an application information storage unit 21a that stores application information when sound output information is acquired, and a screen information storage that records screen display information when the sound output information is acquired. And at least a portion 21b. Needless to say, the storage means 21 is stored in a temporary storage area in addition to the hard disk or the like, similarly to the supervisor computer 1.

  The sound output information transmission processing unit 20a acquires the sound output when the application is used, and transmits it to the supervisor computer 1 as appropriate. As described above, each client computer 2 stores the history information of the sound output information. It may be stored and managed, and this history information or processed sound output information may be transmitted to the supervisor computer 1 at a predetermined timing. The screen information storage unit 21b temporarily stores the screen display information of the display 24 when the sound output information is acquired. If the result of determination by the monitor computer 1 is that the monitor is out of business, the monitor computer 1 and displayed on the display by the screen display processing unit 10e of the supervisor computer 1.

  Specifically, the use restriction processing unit 20d receives the handling information from the supervisor computer 1, and displays a predetermined warning text for the operator on the display 24 in a pop-up screen, or generates a warning sound from the speaker. It is possible to take various actions such as issuing a process, forcibly terminating an application determined to be out of business, locking the use of the application, and limiting the sound output of the application. In addition to specifying the application based on the title bar information, it is also a preferable embodiment to specify the application based on the process name and process number obtained from the OS.

  Hereinafter, each procedure in the application usage monitoring system of the present invention will be described based on the flowchart of FIG.

  The client computer 2 acquires the sound output information (S101), and stores the startup application information and the screen display information (window display screen) at the time of acquisition in the application information storage unit 21a and the screen information storage unit 21b, respectively. At the same time, the sound output information and application information are transmitted to the supervisor computer 1 (S102).

  The supervisor computer 1 receives the sound output information from the client computer 2 (S103), and refers to the sound data feature information in the sound data feature information storage unit 11a for the sound output information, and the sound of the application outside the work It is determined whether it is an output (S104).

  In S104, when it is determined that the sound output information is a sound output of an application outside the business, the notification processing unit 10f pops up a notification sentence including the information on the client computer and the application on the display to the monitor. At the same time (S105), the application is newly registered in the activation prohibition application information storage means (S106), and predetermined countermeasure information for restricting the use of the application is transmitted to the client computer (S107). This countermeasure information includes, for example, a forced termination instruction for the application.

  Based on the handling information received from the supervisor computer 1, the client computer 2 executes processing related to usage restrictions such as a warning for the operator (S108). Specifically, a warning message for the operator is displayed on the display 24 in a pop-up screen, and the application is forcibly terminated.

  Further, the client computer 2 receives the handling information from the monitor computer 1, thereby transmitting the screen display information recorded in the screen information storage unit 21b to the monitor computer 1 (S109). The person computer 1 displays the display by the notification processing unit 10f (S110).

  On the other hand, if it is determined in S104 that the sound output information is not a sound output of an application outside the business, information that permits the use of the application is transmitted from the supervisor computer 1 to the client computer 2 (S111).

  Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments, and can of course be implemented in various forms without departing from the gist of the present invention. For example, when the system is configured by a single computer, sound data feature information storage means for storing sound data feature information that can identify each application for sound output when using a plurality of applications outside the work, Sound output information acquisition means for acquiring sound output information of an application used in the computer, and for the acquired sound output information, refer to sound data feature information in the sound data feature information storage means, It is sufficient to include a determination unit that determines whether or not the sound is output, and a notification unit that executes a warning or the like to the operator when the determination unit determines that the sound is output from an application outside the business. Accordingly, it is not necessary to separately provide a monitoring computer, and a system for self-monitoring operations in its own computer can be provided.

Explanatory drawing which shows the whole structure of the application use monitoring system which concerns on this invention. The block diagram which similarly shows the structure of the supervisor computer in an application use monitoring system. The block diagram which similarly shows the structure of a client computer. Explanatory drawing which shows the comparison method of sound output information and characteristic information. The flowchart which similarly shows the process sequence in an application usage monitoring system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Monitor computer 2 Client computer 10 Processing apparatus 10a Sound output information reception process part 10b Judgment process part 10c Handling information transmission process part 10d Application registration process part 10e Screen display process part 10f Notification process part 11 Storage means 11a Sound data characteristic information storage Unit 11b sound output history storage unit 11c activation prohibition application information storage unit 12 communication control unit 13 input operation means 14 display 20 processing device 20a sound output information transmission processing unit 20b application information storage processing unit 20c screen information storage processing unit 20d use restriction processing Unit 20e Screen information transmission processing unit 21 Storage unit 21a Application information storage unit 21b Screen information storage unit 22 Communication control unit 23 Input operation unit 24 Display N Communication network S Application Use restriction system

Claims (5)

Computer
Sound data feature information storage means for storing sound data feature information that can identify each application for sound output when using a plurality of applications outside of work;
Sound output information acquisition means for acquiring sound output information of an application used in the computer;
With respect to the acquired sound output information, referring to the sound data feature information of the sound data feature information storage means, a determination means for determining whether or not the sound output of an application outside the work,
An application usage monitoring system comprising: notification means for notifying a predetermined person when the determination means determines that the sound output is from an application outside the business. In an application usage monitoring system comprising a plurality of client computers and a supervisor computer connected to the computer,
The supervisor computer is
Sound data feature information storage means for storing sound data feature information that can identify each application for sound output when using a plurality of applications outside of work;
Sound output information receiving means for receiving sound output information of an application used in the client computer from each of the client computers connected for communication;
With respect to the received sound output information, referring to sound data feature information in the sound data feature information storage means, determining means for determining whether or not the sound output of an application outside the work,
A notification means for notifying a predetermined person when it is determined by the determination means that the sound is output from an application outside of work;
The client computer is
An application usage monitoring system comprising sound output information transmitting means for acquiring sound output information when an application is used and transmitting the information to the supervisor computer. In a system composed of a plurality of client computers and a supervisor computer communicatively connected thereto,
The monitor computer includes sound data feature information storage means for storing sound data feature information that can identify each application for sound output when using a plurality of applications outside of work, and the client computer It has sound output information transmitting means for acquiring sound output information at the time of use and transmitting it to the supervisor computer,
The supervisor computer is
A procedure for receiving sound output information of an application used in the client computer from each of the client computers connected for communication;
For the received sound output information, referring to the sound data feature information of the sound data feature information storage means, and determining whether or not the sound output of an application outside the work,
A procedure for notifying a predetermined person when it is determined by the determination that the sound output is from an application outside of work;
An application usage monitoring method characterized by comprising: The application usage monitoring system according to claim 1,
Computer
Sound data feature information storage means for storing sound data feature information that can identify each application for sound output when using a plurality of applications outside the business,
Sound output information acquisition means for acquiring sound output information of an application used in the computer;
For the acquired sound output information, referring to sound data feature information in the sound data feature information storage means, a determination means for determining whether or not the sound is output from an application outside of work,
And an application usage monitoring program that functions as a notification means for notifying a predetermined person when it is determined by the determination means that the sound output is from a non-business application. The application usage monitoring system according to claim 2,
The client computer includes sound output information transmitting means for acquiring sound output information when using the application and transmitting the information to the supervisor computer;
The supervisor computer;
Sound data feature information storage means for storing sound data feature information that can identify each application for sound output when using a plurality of applications outside the business,
Sound output information receiving means for receiving sound output information of an application used in the client computer from each of the client computers connected for communication;
A determination unit that determines whether the sound output of the application outside the work is output by referring to the sound data feature information of the sound data feature information storage unit for the received sound output information,
And an application usage monitoring program that functions as a notification means for notifying a predetermined person when it is determined by the determination means that the sound output is from a non-business application.

Images