JP5204556B2 - Workflow server, workflow management method, workflow management program, and recording medium recording the workflow management program - Google Patents

Description

  The present invention relates to a technique for performing biometric authentication and managing a workflow (determining work to be performed among a plurality of persons and a procedure thereof, and a progress status when the work is performed according to the determined procedure). .

Japanese Patent Application Laid-Open No. 2004-151561 discloses a technique for performing an approval process for an application form as part of a workflow and a technique for authenticating an approver at the time of the business process by performing fingerprint processing.
JP 2001-265915 A

  Patent Literature 1 performs biometric authentication of an approver for approval of an electronic document such as an application form. Such biometric authentication is generally performed in order to ensure evidence that the act of approving an electronic document was objectively performed by an appropriate approver. Therefore, when an electronic document is accompanied, data indicating evidence, for example, seal stamp data is attached to the electronic document.

  However, in recent years, in workflow management, such evidence is required not only for the approval of electronic documents, but also for the approval of the work itself that does not involve electronic documents. became. In this case, since an electronic document is not accompanied, processing such as attaching seal stamp data cannot be performed, and it is not easy to secure evidence. Furthermore, it is not easy for the approver to recognize responsibility for the approval act. Patent Document 1 does not mention such a situation.

  In addition, it is insufficient to perform the authentication of the approval action by password authentication using a password. There is a so-called impersonation problem, and the act of approval by a third party cannot be distinguished properly. Therefore, a situation may occur in which the credibility of the evidence that is secured is impaired.

  In view of the above situation, the object of the present invention is to secure evidence that the work constituting the workflow was objectively approved by an appropriate person without the electronic document in the management of the workflow. The responsibility is to make the person aware of the responsibility for the approval.

  In order to achieve the above object, the present invention displays a message for requesting biometric authentication and identifies the approver using the biometric authentication result when approving the work constituting the workflow without electronic document. To do. Details will be described later.

  According to the present invention, in managing a workflow, it is possible to ensure evidence that the approval of the work constituting the workflow is performed objectively by an appropriate person without accompanying an electronic document, and the responsibility for the approval act is Can be recognized.

  Hereinafter, the best mode for carrying out the present invention (hereinafter referred to as “embodiment”) will be described in detail with reference to the drawings as appropriate.

≪Configuration≫
FIG. 1 illustrates a network configuration in the workflow management system of the present embodiment. This workflow management system includes a client 1 that is a PC (Personal Computer) used by a user such as a work drafter and an approver of the work, a workflow server 2 that is a computer that manages the workflow, and an authentication function. It has the authentication server 3 which is a computer which has.

  FIG. 1 shows a PC 1a used by the approver A, a PC 1b used by the approver B, and a PC 1c used by the drafter in the client 1. A biometric authentication device 4 that performs biometric authentication using finger veins is connected to the PC 1a. The approver A performs biometric authentication using the finger vein using the biometric authentication device 4. An alternative means biometric authentication device 4 ′ for performing biometric authentication other than finger veins is connected to the PC 1b. The approver B performs biometric authentication other than finger veins using the alternative means biometric authentication device 4 ′. Each PC as the client 1 performs login authentication in order to use the workflow management system of this embodiment. Each PC as the client 1 can perform password authentication in addition to biometric authentication as an authentication method. Login authentication may be performed by biometric authentication or password authentication.

  The workflow server 2 stores information such as an authentication log record 6 and workflow work information 7 in a database format in order to manage the workflow. The authentication log record 6 is information indicating an authentication history of the client 1. The workflow work information 7 is information indicating work constituting the workflow. Details of the authentication log record 6 and the workflow work information 7 will be described later.

  The authentication server 3 stores information called personal information for authentication 5 in a database format in order to perform biometric authentication and password authentication. The authentication personal information 5 is personal information of a user who uses the PC that is the client 1. Details of the authentication personal information 5 will be described later.

  A computer constituting the workflow management system will be described. FIG. 2 illustrates the hardware resource configuration of the client 1. In FIG. 2, a PC 1 a is illustrated as an example of the client 1. In addition to the biometric authentication device 4, the PC 1a has a keyboard 11, a mouse 12, a display device 13, an input unit 14, a communication device 15, a recording disk 16, a memory 17, a CPU (Central Processing Unit) 18, and an output unit 19. doing. Other PCs are common except for the biometric authentication device 4.

The keyboard 11 is an input device for inputting characters, numbers, and the like. The mouse 12 is an input device that moves a pointer displayed on the screen of the display device 13. The display device 13 is a display device that displays characters, graphics, and the like on a screen.

  The input unit 14 is an input interface that receives information input from the keyboard 11, the mouse 12, and the biometric authentication device 4. The communication device 15 is a communication interface that establishes a connection with the workflow server 2 or the authentication server 3. The recording disk 16 is an external storage device that stores a recording medium on which a program necessary for managing the workflow of the present embodiment is recorded. An example of the recording medium is a ROM (Read Only Memory). The memory 17 is a storage device having a storage area for expanding information to be read and written. This storage device is, for example, a RAM (Random Access Memory). The CPU 18 is a central control device that executes information processing necessary for workflow management. When executing, the program recorded on the recording medium is read. The output unit 19 is an output interface that transmits information processed by the CPU 18 to the display device 13.

  The memory 17 includes an approval processing unit 171 and a search processing unit 172 as functions for realizing the processing of the CPU 18. The approval processing unit 171 executes processes necessary for the approval of the work constituting the workflow for the PC 1a. The search processing unit 172 executes processes necessary for the PC 1a to search for work constituting the workflow. Details will be described later.

  FIG. 3 illustrates the configuration of hardware resources of the workflow server 2. The workflow server 2 includes a communication device 21, a recording disk 22, a memory 23, and a CPU 24.

  The communication device 21 is a communication interface that establishes a connection with the client 1 or the authentication server 3. The recording disk 22 is an external storage device that stores a recording medium in which a program necessary for managing the workflow of the present embodiment is recorded. An example of the recording medium is a ROM. The memory 23 is a storage device having a storage area for developing information to be read and written. This storage device is, for example, a RAM. The CPU 24 is a central control device that executes information processing necessary for workflow management. When executing, the program recorded on the recording medium is read.

  The memory 23 includes an approval processing unit 231 and a search processing unit 232 as functions for realizing the processing of the CPU 24. The approval processing unit 231 executes processes necessary for the workflow server 2 to approve the work constituting the workflow. The search processing unit 232 executes processes necessary for the workflow server 2 to search for work constituting the workflow. Details will be described later.

  FIG. 4 illustrates the configuration of the hardware resources of the authentication server 3. The authentication server 3 includes a communication device 31, a recording disk 32, a memory 33 and a CPU 34.

  The communication device 31 is a communication interface that establishes a connection with the client 1 or the workflow server 2. The recording disk 32 is an external storage device that stores a recording medium on which a program necessary for managing the workflow of the present embodiment is recorded. An example of the recording medium is a ROM. The memory 33 is a storage device having a storage area for developing information to be read and written. This storage device is, for example, a RAM. The CPU 34 is a central control device that executes information processing necessary for workflow management. When executing, the program recorded on the recording medium is read.

  The memory 33 has an approval processing unit 331 as a function for realizing the processing of the CPU 34. The approval processing unit 231 executes processing necessary for the authentication server 3 to approve the work constituting the workflow. Details will be described later.

The authentication personal information 5 stored in the authentication server 3 will be described in detail. FIG. 5 shows the data structure of the authentication personal information 5 . The personal information 5 for authentication is stored as a record for each user who uses the client 1 by a database having a user ID (Identification) field 51, an authentication password field 52, and a biometric authentication pattern field 53.

  In the user ID field 51, a value for identifying a user who uses the client 1 is registered. In the authentication password field 52, when a user performs password authentication, a character string to be compared with a character string input from the keyboard 11, that is, a password is registered. In the biometric authentication pattern field 53, when the user performs biometric authentication, a biometric authentication pattern to be compared with biometric information input from the biometric authentication device 4 (or alternative means biometric authentication device 4 ′) is registered. As a biometric authentication pattern, for example, there is a pattern obtained by encrypting biometric information of a user who has been acquired in advance using a predetermined algorithm. The biometric authentication pattern is created for each biometric authentication unit. Even the same user may be created as another record. By reading the biometric authentication pattern from the biometric authentication pattern field 53, it is possible to determine which biometric authentication means a certain user can use.

  The authentication log record 6 stored in the workflow server 2 will be described in detail. FIG. 6 illustrates the data structure of the authentication log record. The authentication log record 6 includes a work number field 61, an approver ID field 62, an authentication method field 63, a time stamp field 64, a falsification prevention information field 65, and an approval requester field 66. Is stored as a record.

  In the work number field 61, a number for identifying the work constituting the workflow is registered. In the approver ID field 62, a value for identifying a person who approves the work constituting the workflow, that is, the approver is registered. In the authentication method field 63, a value for identifying a means for performing authentication is registered. In the time stamp field 64, at least an authentication time and a code number for identifying the authentication are registered. In the falsification prevention information field 65, for example, a character string that functions as falsification prevention is registered. In the approval requester field 66, a value for identifying a person who requests the approver to approve the work constituting the workflow is registered. The person who makes this request is usually the drafter of the work constituting the workflow.

  The workflow work information 7 stored in the workflow server 2 will be described in detail. FIG. 7 shows the data structure of workflow work information. The workflow work information 7 includes a work number field 71, a case name field 72, a person in charge field 73, an approval request date field 74, an approval request destination field 75, an approval completion date field 76, an approval deadline field 77, a process field 78, and a work status. The database having the field 79 stores work constituting the workflow as a record.

  In the work number field 71, a number for identifying a work constituting the workflow (hereinafter sometimes referred to as “work ID”) is registered. In the case name field 72, the name of the case to be processed in the work constituting the workflow is registered. In the person-in-charge field 73, the person in charge of the subject matter in the work constituting the workflow, that is, the drafter is registered. In the approval request date field 74, the date when the person in charge requested the approver for approval is registered. In the approval request destination field 75, a value (hereinafter, also referred to as “approver ID”) for identifying the approver who has requested the request is registered. In the approval completion date field 76, the date on which the approval by the approver is completed is registered. In the approval time limit field 77, a date for approval by the approver is registered. In the process field 78, the contents of work constituting the workflow are registered. In the work status field 79, the progress status of the work constituting the workflow is registered.

  A functional configuration of a computer constituting the workflow management system will be described. FIG. 8 illustrates the functional configuration of the approval processing unit of the client 1. In FIG. 8, a PC 1 a is illustrated as an example of the client 1. The approval processing unit 171 of the client 1 includes a login instruction unit 171a, a work list screen display unit 171b, a work selection unit 171c, an approval execution unit 171d, an approval action authentication screen display unit 171e, an approval confirmation acceptance instruction unit 171f, and a biometric authentication means selection. Screen display unit 171g, biometric authentication means selection unit 171h, biometric authentication execution screen display unit 171i, biometric authentication information input unit 171j, approval result confirmation screen display unit 171k, work list screen redisplay unit 171l, and approved work content selection unit 171m It is comprised. In other PCs, the PC used by the approver is common.

The login instruction unit 171a processes an instruction for starting login authentication, which is input from the input device by the user.
The work list screen display unit 171b performs processing so as to display a list of work constituting the workflow, which has been requested for approval, on the screen of the display device 13.
The work selection unit 171c performs processing so as to select a work input from the input device by the user from the work list displayed by the work list screen display unit 171b. The work list screen display unit 171b performs processing to display that the work is selected and the detailed contents of the work.

The approval execution unit 171d performs processing to execute approval for the work selected by the work selection unit 171c.
The approval act authentication screen display unit 171e performs processing to display on the screen of the display device 13 that the authentication required for the approval act is started.
The approval confirmation approval instruction unit 171f processes an instruction input from the input device by the user to the effect that the approval action has been performed based on his / her own intention.

The biometric authentication means selection screen display unit 171g performs processing to display that the biometric authentication means to be used when performing authentication necessary for the approval action is selected.
The biometric authentication means selection unit 171h processes selection of biometric authentication means input from the input device by the user.
The biometric authentication execution screen display unit 171i performs processing to display that the authentication necessary for the approval action is being executed.

The biometric authentication information input unit 171j performs processing so that biometric authentication information (in this case, biometric information necessary for finger vein authentication) input from the biometric authentication device 4 by the user is used for biometric authentication processing.
The approval result confirmation screen display unit 171k performs processing to display on the screen of the display device 13 that the authentication necessary for the approval action has succeeded or failed.

The work list screen redisplay unit 171l performs processing so that the approval result by the approval execution unit 171d is reflected on the screen of the display device 13 to display a list of work constituting the workflow that has been requested for approval.
The approved work content selection unit 171m performs processing so as to select the work input from the input device by the user from the work list displayed by the work list screen redisplay unit 171l. The work list screen redisplay unit 171l performs processing to display that the work has been selected, the detailed contents of the work, and the approval result of the work if it has been approved.

  FIG. 9 illustrates a functional configuration of the approval processing unit of the workflow server 2. The approval processing unit 231 of the workflow server 2 includes a login authentication unit 231a, a work list acquisition unit 231b, an approval action authentication screen processing unit 231c, a biometric authentication unit acquisition unit 231d, a biometric authentication unit selection screen processing unit 231e, and a biometric authentication execution screen process. A unit 231f, a biometric authentication information acquisition unit 231g, a biometric authentication information verification request unit 231h, a falsification prevention information acquisition unit 231i, an authentication log record writing unit 231j, a work status change unit 231k, and an approval result confirmation screen processing unit 231l. Has been.

The login authentication unit 231a performs processing to request the authentication server 3 for login authentication instructed by the client 1.
The work list acquisition unit 231b acquires the work list constituting the workflow, which has been requested for approval from the user who is permitted the login authentication, by extracting from the workflow work information 7. If the detailed content of the work is also registered in the workflow work information 7, the detailed content is also acquired. The acquired work list and detailed contents are transmitted to the client 1 so that they can be displayed on the display device 13.

The approval action authentication screen processing unit 231c performs processing so as to create content to be displayed on the approval action authentication screen display unit 171e of the client 1, that is, content indicating that authentication necessary for the approval action is started.
The biometric authentication means acquisition unit 231d performs processing to inquire and acquire biometric authentication means that can be used by the user from the authentication server 3.
The biometric authentication means selection screen processing unit 231e performs processing to create content to be displayed on the biometric authentication means selection screen display unit 171g of the client 1, that is, content indicating that the biometric authentication means is selected.

The biometric authentication execution screen processing unit 231f performs processing so as to create content to be displayed on the biometric authentication execution screen display unit 171i of the client 1, that is, content indicating that authentication necessary for the approval action is being executed.
The biometric authentication information acquisition unit 231g performs processing so as to acquire biometric authentication information from the client 1.

  The biometric authentication information verification request unit 231h transmits the biometric authentication information acquired by the biometric authentication information acquisition unit 231g to the authentication server 3, and performs processing to request verification of biometric authentication information in biometric authentication. Using the work number of the work executed by the approval execution unit 171d of the client 1 as a search key, the work number field 71 of the workflow work information 7 is searched, the corresponding record is extracted, and the work ID and the approver are extracted from the extracted records. Read the ID. On the other hand, a time stamp indicating when the approval is executed is generated by, for example, a known method. The biometric authentication information collation request unit 231h transmits the work ID, the approver ID, the time stamp, and the biometric authentication information to the authentication server 3.

The tampering prevention information acquisition unit 231 i acquires tampering prevention information for the act of approving the work from the authentication server 3.
The authentication log record writing unit 231j creates a history of the authentication of authentication by the client 1 by adding a new record to the authentication log record 6.
The work status change unit 231k changes the work status of work for which the approval action by the client 1 has been authenticated. When the approval is made, the value “unapproved” registered in the work status field 79 of the workflow work information 7 is updated to the value “approved”.

  The approval result confirmation screen processing unit 231l creates a list of operations constituting the workflow, reflecting the contents to be displayed on the work list screen redisplay unit 171l of the client 1, that is, the approval result by the approval execution unit 171d. To process. The workflow work information 7 is processed so that the approved result is also registered in association with the approved work (record).

  FIG. 10 illustrates a functional configuration of the approval processing unit of the authentication server 3. The approval processing unit 331 of the authentication server 3 includes a biometric information collating unit 331a and a falsification preventing information generating unit 331b.

  The biometric authentication information verification unit 331a processes the verification of biometric authentication requested from the biometric authentication information verification request unit 231h. When the work ID, the approver ID, the time stamp, and the biometric authentication information are received from the workflow server 2, the user ID field 51 of the authentication personal information 5 is searched using the approver ID as a search key, and the corresponding record is obtained. Extract the biometric authentication pattern from the extracted records. The read biometric authentication pattern and the received biometric authentication information are compared and collated to determine the success or failure of the authentication.

  When the authentication by the biometric authentication information matching unit 331a is successful, the falsification prevention information generation unit 331b is configured to prevent falsification information based on the work ID, the approver ID, the time stamp, and the biometric authentication information received from the workflow server 2. Is generated by a known method, for example. The generated falsification prevention information is transmitted to the workflow server 2 and registered in the falsification prevention information field 65 of the authentication log record 6.

  FIG. 11 illustrates the functional configuration of the search processing unit of the client 1. FIG. 11 illustrates a PC 1 a as an example of the client 1. The search processing unit 172 of the client 1 includes a login instruction unit 172a, a work list screen display unit 172b, an approval result search instruction unit 172c, a search condition input screen display unit 172d, a search condition selection unit 172e, a search execution instruction unit 172f, and a search result. A screen display unit 172g is included.

The login instruction unit 172a processes an instruction to start login authentication input from the input device by the user.
The work list screen display unit 172b performs processing to display on the screen of the display device 13 a list of work constituting the workflow that has been requested for approval.

The approval result search instruction unit 172c processes an instruction input from the input device by the user to start searching for the approval result.
The search condition input screen display unit 172d performs processing to display on the screen of the display device 13 that a search condition necessary for searching for the approval result is input.
The search condition selection unit 172e processes selection of the search condition input from the input device by the user.

The search execution instructing unit 172f performs processing to execute a search based on the selected search condition input from the input device by the user.
The search result screen display unit 172g performs processing so that the search result corresponding to the selected search condition is displayed on the screen of the display device 13.

  FIG. 12 illustrates the functional configuration of the search processing unit of the workflow server 2. The search processing unit 232 of the workflow server 2 includes a login authentication unit 232a, a work list acquisition unit 232b, a search condition input screen processing unit 232c, an authentication log record acquisition unit 232d, a workflow work information search processing execution unit 232e, and a search result screen processing unit. 232f is configured.

The login authentication unit 232a performs processing to request the authentication server 3 for login authentication instructed by the client 1.
The work list acquisition unit 232b acquires the work list constituting the workflow, which has been requested for approval from the user who has been permitted the login authentication, by extracting from the workflow work information 7. If the detailed content of the work is also registered in the workflow work information 7, the detailed content is also acquired. The acquired work list and detailed contents are transmitted to the client 1 so that they can be displayed on the display device 13.

The search condition input screen processing unit 232c performs processing to create content to be displayed on the search condition input screen display unit 172d of the client 1, that is, content indicating that the search condition is input.
The authentication log record acquisition unit 232 d acquires the authentication history of the approval action by the client 1 from the authentication log record 6.
The workflow work information search processing execution unit 232e searches for the workflow work information 7 according to the search condition selected by the search condition selection unit 172e of the client 1.
The search result screen processing unit 232f performs processing so as to create the content to be displayed on the search result screen display unit 172g, that is, the search result searched by the workflow work information search processing execution unit 232e.

<< Process >>
Next, in particular, the approval process and the search process will be described in detail as processing operations in the workflow management system of the present embodiment.

[Approval processing flow]
13A and 13B illustrate the approval process in the workflow management system as an approval process flow. Further, the display contents of the display device 13 of the client 1 when the approval process is proceeding from FIG. 14 to FIG. 22 are illustrated.

  First, in step S101, the approval processing unit 231 executes login authentication processing by the login authentication unit 231a. After executing this process, the process proceeds to step S102.

  Next, in step S102, the approval processing unit 231 determines whether the approver who uses the client 1 is a user who can use the workflow managed by the workflow management system. If the user is available (Yes in step S102), the process proceeds to step S103. If the user is not available (No in step S102), the approval process is terminated.

  Next, in step S <b> 103, the approval processing unit 231 acquires a list of operations constituting the workflow by the work list acquisition unit 231 b and transmits the acquired operation (workflow item) to the client 1. After the transmission, the process proceeds to step S104.

  Next, in step S <b> 104, the approval processing unit 171 executes a workflow process list screen display process. The work list screen display unit 171b performs processing so as to display a list of work constituting the workflow on the screen of the display device 13. After performing this process, the process proceeds to step S105.

  FIG. 14 illustrates a screen of the display device 13 when the process of step S104 of the approval process flow is executed. In the “approval request work list”, the work acquired in step S103 is displayed.

  Next, in step S105, the approval processing unit 171 executes a workflow work selection process. The work selection unit 171c performs processing so that the user can select a work from the “approval request work list”. After performing this process, the process proceeds to step S106.

  FIG. 15 illustrates the screen of the display device 13 when the process of step S105 of the approval process flow is executed. The user can select a check box 1501 from the input device and mark the check box to select, for example, the work at the top of the “approval request work list”. When a “content confirmation” button 1502 of “Menu” is clicked, a detailed description regarding the work is displayed in the work detail 1503 area.

  Next, in step S106, the approval processing unit 171 executes request processing. Process to determine the user's request for the selected task. After executing this process, the process proceeds to step S107.

  Next, in step S107, the approval processing unit 171 determines whether the request determined by the user is an approval request or a hold / send back request (hold request or send back request). If it is an approval request (“approval request” in step S107), the process proceeds to step S108. If the request is a hold / send-back request (“hold / send-back request” in step S107), a hold / send-back process (holding process or send-back process) is executed. The “approval request” is a request indicating an intention to approve a selected work. The “pending request” is a request indicating that the selected work is not approved at the present time and an intention to decide a measure later. The “send-back request” is a request indicating that the selected work is not approved and the intention to return to the person in charge of the work before the work (for example, the drafter). The “holding process” is information processing for putting the selected work on hold, and the “sending process” is information processing for returning the selected work to the person in charge of the previous work of the work. is there. Details regarding these processes are omitted.

  Next, in step S108, the approval processing unit 171 executes an approval action authentication screen display process. The approval action authentication screen display unit 171e performs processing so as to display on the screen of the display device 13 that the authentication required for the approval action is started. After performing this process, the process proceeds to step S109.

  FIG. 16 illustrates the screen of the display device 13 when the process of step S108 of the approval process flow is executed. When the “Approve” button 1601 of “Menu” is clicked, it is processed as if an approval request was made for the work marked in the check box, and as a result, a dialog “Approval Action Authentication Screen” 1602 is displayed. When an “OK” button 1603 is clicked on the “approval action authentication screen” 1602, the approval confirmation acceptance instructing unit 171 f processes the explanation described in this dialog as having been accepted by the approver, and proceeds to biometric authentication processing. Incidentally, when a “hold” button 1604 is clicked, a hold process is executed, and when a “send back” button 1605 is clicked, a return process is executed.

  Next, in step S109, the approval processing unit 171 executes biometric authentication means selection processing. The biometric authentication means selection screen display unit 171g performs processing so as to display that the biometric authentication means required for approval is selected, and the biometric authentication means selection unit 171h performs processing so that the user can select the biometric authentication means. . After performing this process, the process proceeds to step S110.

  FIG. 17 illustrates the screen of the display device 13 when the process of step S109 of the approval process flow is executed. The biometric authentication means selection screen display unit 171g displays a dialog “Biometric authentication selection screen” 1701. The “biometric authentication selection screen” 1701 displays biometric authentication means (means 1 to 3) that can be used by the user. The biometric authentication means selection unit 171h selects one of the available biometric authentication means. Here, in order for the user to select “finger vein” of the means 1, the radio button 1702 is clicked to enable it. Thereafter, when an “OK” button 1703 is pressed, the process proceeds to the next process.

  Next, in step S110, the approval processing unit 171 executes biometric authentication execution screen display processing. The biometric authentication execution screen display unit 171i performs processing to display that the authentication necessary for the approval action is being executed. After performing this process, the process proceeds to step S111.

  FIG. 18 illustrates the screen of the display device 13 when the process of step S110 of the approval process flow is executed. The biometric authentication execution screen display unit 171i displays a dialog 1801 indicating that the finger vein authentication of the means 1 is being executed by a progressive bar.

  Next, in step S111, the approval processing unit 171 executes biometric authentication information input processing. The biometric authentication information input unit 171j performs processing to input biometric authentication information for finger vein authentication from the biometric authentication device 4. The biometric authentication information acquisition unit 231g of the workflow server 2 acquires this biometric authentication information. After performing this process, the process proceeds to step S112.

  Next, in step S112, the approval processing unit 231 executes a verification request process. The biometric authentication information verification requesting unit 231h transmits the acquired biometric authentication information to the authentication server 3, and processes to request verification of biometric authentication information in biometric authentication. After performing this process, the process proceeds to step S113.

  Next, in step S113, the approval processing unit 331 determines whether the biometric information received from the workflow server 2 is correct. The biometric authentication information matching unit 331a compares the received biometric authentication information with the biometric authentication pattern registered in the authentication personal information 5. If the received biometric authentication information is correct (“correct” in step S113), it means that biometric authentication has succeeded, and the process proceeds to step S114. If the received biometric authentication information is not correct (“incorrect” in step S113), it means that biometric authentication has failed and the process proceeds to step S120.

  Next, in step S114, the approval processing unit 331 executes falsification prevention information generation processing. The tampering prevention information generating unit 331b performs processing to generate tampering prevention information. After performing this process, the process proceeds to step S115.

  Next, in step S115, the approval processing unit 331 transmits the falsification prevention information to the workflow server 2. After the transmission, the process proceeds to step S116.

  Next, in step S116, the approval processing unit 231 executes an authentication log record writing process. The authentication log record writing unit 231j processes the authentication log record 6 so as to newly create an authentication history of the approval action for the work selected by the user. After performing this process, the process proceeds to step S117.

  Next, in step S117, the approval processing unit 231 executes a work status change process. The work status changing unit 231k performs processing so as to change the work status of the work for which the approval action for the work selected by the user has been authenticated from “unapproved” to “approved”. After performing this process, the process proceeds to step S118.

  Next, in step S118, the approval processing unit 171 executes an approval result confirmation screen display process. The approval result confirmation screen display unit 171k performs processing so as to display on the screen of the display device 13 that the authentication required for the approval action has been successful. After performing this process, the process proceeds to step S119.

  FIG. 19 illustrates the screen of the display device 13 when the process of step S118 of the approval process flow is executed. The approval result confirmation screen display unit 171k displays a dialog “approval result confirmation screen” 1901. When the “OK” button 1902 is clicked, this dialog is closed.

  Next, in step S119, the approval processing unit 171 executes a work list screen update process. The work list screen re-display unit 171l performs processing so that the approval result is reflected on the screen of the display device 13 and a list of works constituting the workflow is displayed. After performing this process, the approval process flow is terminated.

  FIG. 20 illustrates a screen of the display device 13 when the process of step S119 of the approval process flow is executed. Focusing on the field “Status” in the work that has been approved for the approval action of “Approval Request Work List” (the top record in the list), it was previously “Unapproved”, but the work list screen update process Is changed to “approved” (see reference numeral 2001). Further, focusing on the field of “approval means”, it was previously blank, but since finger vein authentication was performed, it was changed to “biological” by the work list screen update process (see reference numeral 2002).

  In the state of FIG. 20, the approved work content selection unit 171m can confirm the approval result of the work that is “approved”. FIG. 21 illustrates a screen of the display device 13 when the process of confirming the approved work content is executed. By selecting a check box 2101 from the input device and marking the check box, the user can select again the work at the top of the “approval request work list”, for example. When a “content check” button 2102 of “Menu” is clicked, an approval result regarding the work is displayed in the area of the approval result 2104 in addition to the work details 2103. The approval result 2104 can be attached with seal data called “approval seal” that guarantees the approval action of the approver.

  Next, in step S120, the approval processing unit 171 executes an authentication error screen display process. The approval result confirmation screen display unit 171k performs processing so as to display on the screen of the display device 13 that the authentication required for the approval action has failed. After performing this process, the process proceeds to step S121.

  FIG. 22 illustrates a screen of the display device 13 when the process of step S120 of the approval process flow is executed. The approval result confirmation screen display unit 171k displays a dialog “authentication error” 2201. At this time, the user selects either re-execution of biometric authentication from the input device or reselection of biometric authentication means.

  Next, in step S121, the approval processing unit 171 determines whether the user has re-executed biometric authentication or reselected biometric authentication means. If it is selected to re-execute biometric authentication (“re-execute biometric authentication” in step S121), the process returns to step S111. If it is selected to reselect the biometric authentication means (step S121 “reselection of biometric authentication means”), the process returns to step S109.

When a “re-authentication” button 2202 is clicked in the “authentication error” 2201 dialog of FIG. 22, processing for selecting re-execution of biometric authentication is executed. On the other hand, when a “reselect” button 2203 is clicked, a process for selecting reselection of biometric authentication means is executed.
Above, the detailed description regarding the approval process in the workflow management system of this embodiment is complete | finished.

[Search process flow]
FIG. 23 illustrates search processing in the workflow management system as a search processing flow. 24 to 26 show the display contents of the display device 13 of the client 1 when the search process is in progress. It is assumed that login authentication has already been successful.

  First, in step S <b> 201, the search processing unit 172 executes a workflow process list screen display process. The work list screen display unit 172b performs processing so as to display a list of work constituting the workflow on the screen of the display device 13. After performing this process, the process proceeds to step S202.

  FIG. 24 illustrates the screen of the display device 13 when the process of step S201 of the search process flow is executed. In the “approval request work list”, the work acquired by the work list acquisition unit 231b is displayed.

  Next, in step S202, the search processing unit 172 executes an approval result search instruction process. The approval result search instruction unit 172c processes an instruction to start searching for an approval result. In FIG. 24, this instruction can be performed by clicking an “approval result search” button 2404 of “Menu”. After performing this process, the process proceeds to step S203.

  Next, in step S203, the search processing unit 172 executes a search condition input screen display process. The search condition input screen display unit 172d performs processing so as to display on the screen of the display device 13 that a search condition necessary for searching for the approval result is input. After performing this process, the process proceeds to step S204.

  FIG. 25 illustrates the screen of the display device 13 when the process of step S203 of the search process flow is executed. The search condition input screen display unit 172d displays a dialog “approval result search screen” 2501. Search processing can be executed with search axes of “approver ID”, “approver name”, “approval date”, and “approval process”. However, the search axis is not limited to these. For example, the field items constituting the workflow work information 7 may be set as search axes.

  Next, in step S204, the search processing unit 172 executes a search condition selection process. The search condition selection unit 172e performs processing so that the user can select a search condition. In FIG. 25, a desired value is input in the search axis column. After performing this process, the process proceeds to step S205.

  Next, in step S205, the search processing unit 172 executes a search execution instruction process. The search execution instruction unit 172f performs processing so that the workflow server 2 executes search processing based on the search condition selected by the user. After performing this process, the process proceeds to step S206.

  Next, in step S206, the search processing unit 232 acquires the corresponding workflow work from the workflow work information and the authentication log record. The workflow work information search processing execution unit 232e searches for the workflow work information 7 in accordance with the search condition specified by the client 1. The corresponding work is acquired with reference to the authentication log record 6 as well. The acquired work is transmitted to the client 1. After performing this process, the process proceeds to step S207.

  Next, in step S207, the search processing unit 172 executes a search result screen display process. The search result screen display unit 172g performs processing so as to display a list of operations constituting the workflow as the search result on the screen of the display device 13.

FIG. 26 illustrates a screen of the display device 13 when the process of step S207 of the search process flow is executed. In the “approval request work list”, a list (2) of work constituting the workflow as a search result is displayed.
Above, the detailed description regarding the approval process in the workflow management system of this embodiment is complete | finished.

≪Summary≫
According to the present embodiment, the following effects can be obtained. In other words, because biometric authentication is used in workflow management and the biometric authentication log is recorded, evidence that the work constituting the workflow was objectively approved by an appropriate person without an electronic document. Sex can be secured. At the same time, since a confirmation message is displayed on the screen at the time of approval, the person can be made aware of the responsibility for the approval action.

≪Others≫
An example of the embodiment of the present invention has been described above, but the present invention is not limited to this and can be appropriately changed without departing from the spirit of the present invention.

  For example, in this embodiment, finger vein authentication is used as biometric authentication, but the present invention is not limited to this. For example, biometric authentication using fingerprints, palm veins, irises, or the like may be used.

  Further, in the present embodiment, only one item that is subject to authentication of approval is selected (see FIG. 15 and the like). However, it is possible to select a plurality of cases that are subject to authentication of approval actions. For example, for the work to be approved among the work displayed in the “approval request work list”, authentication may be performed after all the check boxes on the left side are marked. Thereby, reduction of processing time can be achieved.

  In addition, specific configurations of hardware, software, flowcharts, and the like can be changed as appropriate without departing from the spirit of the present invention.

1 illustrates a network configuration in a workflow management system of the present embodiment. 2 shows the configuration of hardware resources of the client 1. 2 shows the configuration of hardware resources of the workflow server 2. The structure of the hardware resource of the authentication server 3 is illustrated. 2 is a diagram illustrating a data structure of personal information for authentication. Fig. 3 illustrates the data structure of an authentication log record. 2 is a diagram illustrating a data structure of workflow work information. 2 shows a functional configuration of an approval processing unit of the client 1. The functional configuration of the approval processing unit of the workflow server 2 is illustrated. The function structure of the approval process part of the authentication server 3 is illustrated. 2 illustrates a functional configuration of a search processing unit of the client 1. 2 is a diagram illustrating a functional configuration of a search processing unit of the workflow server 2. The approval process in the workflow management system is illustrated as an approval process flow. The approval process in the workflow management system is illustrated as an approval process flow. The screen of the display apparatus 13 when the process of step S104 of the approval process flow is executed is illustrated. The screen of the display apparatus 13 when the process of step S105 of the approval process flow is executed is illustrated. The screen of the display apparatus 13 when performing the process of step S108 of the approval process flow is illustrated. The screen of the display apparatus 13 when performing the process of step S109 of the approval process flow is illustrated. The screen of the display apparatus 13 when the process of step S110 of an approval process flow is performed is illustrated. The screen of the display apparatus 13 when the process of step S118 of the approval process flow is executed is illustrated. The screen of the display apparatus 13 when performing the process of step S119 of the approval process flow is illustrated. The screen of the display apparatus 13 when the process which confirms the approved work content is performed is illustrated. The screen of the display apparatus 13 when the process of step S120 of the approval process flow is executed is illustrated. The search processing in the workflow management system is illustrated as a search processing flow. The screen of the display apparatus 13 when the process of step S201 of a search process flow is performed is illustrated. The screen of the display apparatus 13 when performing the process of step S203 of the search process flow is illustrated. The screen of the display apparatus 13 when the process of step S207 of a search process flow is performed is illustrated.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Client 2 Workflow server 3 Authentication server 4 Biometric authentication apparatus 4 'Alternative means Biometric authentication apparatus 5 Personal information for authentication 6 Authentication log recording 7 Workflow work information 171, 231 and 331 Approval processing section 172 and 232 Search processing section

Claims (8)

A biometric authentication apparatus that acquires biometric authentication information from an approver who approves the work constituting the workflow, an input unit that inputs an approval request by the approver, and a display unit that performs display related to approval of the work constituting the workflow Capable of communicating with a client having
The biometric authentication pattern of the approver is stored, the biometric authentication information acquired from the client and the biometric authentication pattern are collated and communicated with an authentication server that performs biometric authentication,
A workflow server that manages the workflow by processing the client's approval request and transmitting the biometric authentication information of the approver to the authentication server to request verification of the biometric authentication information.
The workflow server
Control means for processing approval of work constituting the workflow;
Workflow work information associated with at least work identification information for identifying work constituting the workflow, approver identification information for identifying an approver of the work, and work status information indicating the progress of the work;
An authentication log record in which at least work identification information for identifying work constituting a workflow, approver identification information for identifying an approver of the work, and a time stamp are associated;
Falsification prevention information of the workflow work information related to the work;
Storage means for storing
Have
The tampering prevention information of the workflow work information related to the work is based on the biometric authentication information used for authentication related to the work identification information, the approver identification information, the time stamp, and the verification request by the authentication server. Generated
The control means includes
For the work requested for approval from the client, the approver is displayed on the display means of the client to request that the authentication server perform biometric authentication,
When the information indicating permission to the request of the approver from the client Ru is received, performs the collation request to the authentication server,
When the authentication related to the verification request is successful, an authentication history of an approval result indicating that the work has been approved is newly created in the authentication log record, displayed on the display means, and an approval action of the approver the seal image data to ensure it possible to be subjected to the authentication history,
The workflow server stores the falsification preventing information and the authentication log record in association with each other in the storage unit.
A workflow server characterized by that . The biometric authentication device possessed by the client is a device for finger vein authentication,
The workflow server according to claim 1, wherein the biometric authentication performed by the authentication server is finger vein authentication. A biometric authentication apparatus that acquires biometric authentication information from an approver who approves the work constituting the workflow, an input unit that inputs an approval request by the approver, and a display unit that performs display related to approval of the work constituting the workflow Capable of communicating with a client having
The biometric authentication pattern of the approver is stored, the biometric authentication information acquired from the client and the biometric authentication pattern are collated and communicated with an authentication server that performs biometric authentication,
A workflow server that manages the workflow by processing the client's approval request and transmitting the biometric authentication information of the approver to the authentication server to request verification of the biometric authentication information.
The workflow server
Control means for processing approval of work constituting the workflow;
Workflow work information associated with at least work identification information for identifying work constituting the workflow, approver identification information for identifying an approver of the work, and work status information indicating the progress of the work;
An authentication log record in which at least work identification information for identifying work constituting a workflow, approver identification information for identifying an approver of the work, and a time stamp are associated;
Storage means for storing
Have
The control means includes
For the work requested for approval from the client, the approver is displayed on the display means of the client to request that the authentication server perform biometric authentication,
When the information indicating permission to the request of the approver from the client Ru is received, performs the collation request to the authentication server,
When authentication related to the verification request is successful, an authentication history of an approval act that approves the work is newly created in the authentication log record, and the work identification information, the approver identification information, the time stamp And a falsification preventing information created by the authentication server based on the biometric authentication information used for authentication related to the verification request, registered in the authentication log record in association with the authentication history. A biometric authentication apparatus that acquires biometric authentication information from an approver who approves the work constituting the workflow, an input unit that inputs an approval request by the approver, and a display unit that performs display related to approval of the work constituting the workflow Capable of communicating with a client having
The biometric authentication pattern of the approver is stored, the biometric authentication information acquired from the client and the biometric authentication pattern are collated and communicated with an authentication server that performs biometric authentication,
A workflow management method for a workflow server that manages a workflow by processing an approval request of the client and transmitting biometric authentication information of the approver to the authentication server to request verification of the biometric authentication information. And
The workflow server
Control means for processing approval of work constituting the workflow;
Workflow work information associated with at least work identification information for identifying work constituting the workflow, approver identification information for identifying an approver of the work, and work status information indicating the progress of the work;
An authentication log record in which at least work identification information for identifying work constituting a workflow, approver identification information for identifying an approver of the work, and a time stamp are associated;
Falsification prevention information of the workflow work information related to the work;
Storage means for storing
Have
The tampering prevention information of the workflow work information related to the work is based on the biometric authentication information used for authentication related to the work identification information, the approver identification information, the time stamp, and the verification request by the authentication server. Generated
The control means includes
Displaying on the display means of the client that the approver is requested to perform biometric authentication by the authentication server for work requested by the client;
When the information indicating permission to the request of the approver from the client Ru is received, and performing the verification request to the authentication server,
When the authentication related to the verification request is successful, an authentication history of an approval result indicating that the work has been approved is newly created in the authentication log record, displayed on the display means, and an approval action of the approver The step of allowing the seal history data to be attached to the authentication history,
The execution,
The workflow server stores the falsification preventing information and the authentication log record in association with each other in the storage unit.
A workflow management method characterized by the above. A workflow management program for causing the control means to execute the workflow management method according to claim 4 . A biometric authentication apparatus that acquires biometric authentication information from an approver who approves the work constituting the workflow, an input unit that inputs an approval request by the approver, and a display unit that performs display related to approval of the work constituting the workflow Capable of communicating with a client having
The biometric authentication pattern of the approver is stored, the biometric authentication information acquired from the client and the biometric authentication pattern are collated and communicated with an authentication server that performs biometric authentication,
A workflow management method for a workflow server that manages a workflow by processing an approval request of the client and transmitting biometric authentication information of the approver to the authentication server to request verification of the biometric authentication information. And
The workflow server
Control means for processing approval of work constituting the workflow;
Workflow work information associated with at least work identification information for identifying work constituting the workflow, approver identification information for identifying an approver of the work, and work status information indicating the progress of the work;
An authentication log record in which at least work identification information for identifying work constituting a workflow, approver identification information for identifying an approver of the work, and a time stamp are associated;
Storage means for storing
Have
The control means includes
Displaying on the display means of the client that the approver is requested to perform biometric authentication by the authentication server for work requested by the client;
When the information indicating permission for the request of the approver is received from the client, the verification request to the authentication server;
When authentication related to the verification request is successful, an authentication history of an approval act that approves the work is newly created in the authentication log record, and the work identification information, the approver identification information, the time stamp And falsification prevention information created by the authentication server based on the biometric authentication information used for authentication related to the verification request is registered in the authentication log record in association with the authentication history;
The workflow management method characterized by performing. A workflow management program for causing the control means to execute the workflow management method according to claim 6 . Recording medium recording the workflow management program according to claim 5 or claim 7.

Images