JP6747155B2 - Form management device and program - Google Patents

Description

The present invention relates to a form management device and a program.

Conventionally, there is known a technique for electronically storing a form including highly confidential information (confidential information). Generally, when electronically storing a form including confidential information, a method of encrypting and saving the electronic form is adopted in consideration of security.
By the way, in recent years, as the performance of computers has increased and the capacity of recording devices has increased, the number and amount of data handled has also increased. As a result, the data management load is increasing, and even if files are no longer needed, the data administrator cannot check which files are no longer needed, and there are many cases in which unnecessary files remain. To do.
Therefore, a technique is disclosed in which an expiration date is set for each file and a file whose expiration date has passed is automatically deleted (for example, refer to Patent Document 1).

JP, 11-85578, A

However, in the technique described in Patent Document 1, when the expiration date is set, it is not set individually for each person who uses the file or for each job, and thus there is a problem that a more detailed deadline cannot be dealt with. ..
For example, there is a case in which a user other than the administrator duplicates and holds a file belonging to the administrator under the control of the administrator for the purpose of using it in business. In general, a user other than the administrator often has a shorter period of viewing and using the file for business than the administrator, and it is preferable to set the expiration date to be shorter from the viewpoint of security. However, the technique described in Patent Document 1 has a problem in that it is not possible to ensure sufficient security because files cannot be automatically deleted until a preset expiration date has passed.
Further, if the expiration date is individually set for each person who uses the file or for each business, the administrator needs to take a complicated action, and thus it is not possible to reduce the data management load. is there.

An object of the present invention is to reduce complexity of data management and reduce data management load while ensuring sufficient security in data management.

In order to solve the above-mentioned problems, a form management apparatus according to the present invention includes a reading unit that reads an electronic form having a predetermined item in which my number is described from a storage unit, and an electronic form read by the reading unit. When the my number is already described in the predetermined item in, the my number is readablely displayed in the predetermined item or the my number is not read based on the expiration date of the electronic form. Control means for controlling whether to display with a possible replacement character string, and deleting means for deleting the electronic form from the storage means after the control means displays the my number as an unreadable replacement character string, It is characterized by including.
Also, the program according to the present invention causes the computer of the form management apparatus to read an electronic form having a predetermined item in which my number is described from a storage unit, and the electronic form read by the reading unit. When the My Number is already described in the predetermined item, based on the expiration date of the electronic form, the My Number is readablely displayed in the predetermined item or the My Number cannot be read. To function as a control unit that controls whether or not to display the replacement character string, and a deletion unit that deletes the electronic form from the storage unit after the control unit displays the my number as an unreadable replacement character string. Is characterized by.

According to the present invention, it is possible to reduce complexity of data management and reduce data management load while sufficiently ensuring security in data management.

It is a block diagram which shows the main control structure of each apparatus which comprises the my number management system which concerns on this embodiment. It is a figure which shows an example of a personal number management table. It is a figure which shows an example of an access authority management table. It is a figure which shows an example of a business report related table. It is a figure which shows an example of a form authority management table. It is a figure showing an example of a setting table at the time of form authority excess. It is a flow chart which shows the electronic form creation processing of the my number management system concerning this embodiment. It is a flowchart which shows the electronic form output process of the my number management system which concerns on this embodiment. It is a flowchart which shows the electronic form output process of the my number management system which concerns on this embodiment. It is a figure which shows an example of a login screen. It is a figure which shows an example of a business menu screen. It is a flow chart which shows inquiry authority confirmation processing. It is a figure which shows an example of the form inquiry screen in case a login user has a complete inquiry authority. It is a figure which shows an example of the form inquiry screen in case a login user has a conditional inquiry authority. It is a figure which shows an example of the screen overdue to a disposal deadline. It is a figure which shows an example of an inquiry error screen. 6 is a flowchart showing a print authority confirmation process. It is a figure which shows an example of a printing error screen. 9 is a flowchart showing an electronic form output process of the my number management system according to Modification 1. 9 is a flowchart showing an electronic form output process of the my number management system according to Modification 1. It is a figure which shows an example of a deletion confirmation screen.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[1. Description of configuration]
First, the configuration of the my number management system 100 according to this embodiment will be described.
As shown in FIG. 1, the my number management system 100 includes a client terminal 1, a personnel management server 2, a my number management server 3, and a printing device 4. In the present embodiment, the client terminal 1 and the my number management server 3 cooperate to function as the form management device of the present invention. In this my number management system 100, the client terminal 1, the personnel management server 2, the my number management server 3, and the printing device 4 are communicably connected to each other via a communication network N. The communication network N is a communication network including a wired LAN (Local Area Network), a wireless LAN, a mobile communication network, the Internet, and the like.

The client terminal 1 is an information device such as a PC, a tablet terminal, a smartphone, and a mobile phone. On the client terminal 1, an application (electronic form viewer) that provides a function of making it possible to browse (reference) an electronic form is installed. It should be noted that the client terminal 1 is configured by one unit, but is not limited to this, and may be configured by a plurality of devices.
As shown in FIG. 1, the client terminal 1 is configured to include a control unit 11, an operation unit 12, a display unit 13, a communication unit 14, and a storage unit 15.

The control unit 11 centrally controls the operation of the client terminal 1. Specifically, the control unit 11 is configured to include a CPU, a ROM, a RAM, and the like, and the program data stored in the ROM expanded in the work area of the RAM or the storage unit 15 and the CPU cooperate with each other to operate as a client. Centrally controls each unit of the terminal 1.

The operation unit 12 includes a keyboard having a character input key, a numeric input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, receives an operation input from a user, and responds to the operation input. The operation signal is output to the control unit 11.

The display unit 13 includes a display such as an LCD (Liquid Crystal Display), and displays an image based on the display control signal output from the control unit 11 on the display screen. For example, the display unit 13 displays a screen for performing an operation for instructing the creation of an electronic form (electronic form creation screen), a screen for inquiring an electronic form selected by the user (form inquiry screen), and various other errors. A screen for notifying the user (disposal deadline exceeded screen, inquiry error screen, print error screen) or the like is displayed.

The communication unit 14 is a communication interface having a communication IC (Integrated Circuit), a communication connector, and the like, and performs data communication via the communication network N using a predetermined communication protocol under the control of the control unit 11.

The storage unit 15 includes an HDD (Hard Disk Drive), a semiconductor memory, and the like, and stores data such as program data and various setting data in a readable/writable manner by the control unit 11. The storage unit 15 also stores the electronic form created and transmitted by the personnel management server 2.

The personnel management server 2 is a computer system owned by a company, and is a device that manages personal information of employees and their families as personnel information.
As shown in FIG. 1, the personnel management server 2 includes a control unit 21, an operation unit 22, a display unit 23, a communication unit 24, and a storage unit 25.

The control unit 21 centrally controls the operation of the personnel management server 2. Specifically, the control unit 21 is configured to include a CPU, a ROM, a RAM, and the like, and the personnel data is stored in the work area of the RAM or the program data stored in the storage unit 25 and the CPU in cooperation with the personnel personnel. Centrally controls each unit of the management server 2.

The operation unit 22 includes a keyboard having a character input key, a numeric input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, receives an operation input from a user, and responds to the operation input. The operation signal is output to the control unit 21.
The display unit 23 includes a display such as an LCD, and displays an image based on the display control signal output from the control unit 21 on the display screen.

The communication unit 24 is a communication interface having a communication IC, a communication connector, and the like, and under the control of the control unit 21, performs data communication via the communication network N using a predetermined communication protocol.

The storage unit 25 includes an HDD, a semiconductor memory, and the like, and stores data such as program data and various setting data so that the control unit 21 can read and write the data. The storage unit 25 also stores a personnel information database for managing personnel information.

The my number management server 3 is a computer system owned by a company, and is a device that manages my number information including my numbers (registered trademark) of employees and their families. The My Number is a unique number assigned to people with Japanese nationality so that it will not be duplicated by the My Number system that efficiently manages the personal information of the people.
As shown in FIG. 1, the my number management server 3 includes a control unit 31, an operation unit 32, a display unit 33, a communication unit 34, and a storage unit 35.

The control unit 31 centrally controls the operation of the my number management server 3. Specifically, the control unit 31 is configured to include a CPU, a ROM, a RAM, etc., and the program data stored in the ROM expanded in the work area of the RAM or the storage unit 35 and the CPU cooperate with each other. It centrally controls each unit of the number management server 3.

The operation unit 32 includes a keyboard having a character input key, a numeric input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, receives an operation input from a user, and responds to the operation input. The operation signal is output to the control unit 31.
The display unit 33 includes a display such as an LCD, and displays an image based on the display control signal output from the control unit 31 on the display screen.

The communication unit 34 is a communication interface including a communication IC and a communication connector, and under the control of the control unit 31, performs data communication via the communication network N using a predetermined communication protocol.

The storage unit 35 includes an HDD, a semiconductor memory, and the like, and stores data such as program data and various setting data so that the control unit 31 can read and write the data. The storage unit 35 also stores a my number information database for managing my number information. The storage unit 35 also manages the personal number management table T1 that is a table for managing the My Number of the employee or his/her family in association with other personal information, and the access authority to the work of the employee. An access authority management table T2 which is a table, a business form related table T3 which is a table for managing access authority to an electronic business form, and a table which manages more detailed access authority to an electronic business form. A form authority management table T4 and a form authority excess setting table T5, which is a table for managing the processing when a more detailed access authority to an electronic form is exceeded in association with each type of personal information, are stored. ..

As shown in FIG. 2, the personal number management table T1 includes an employee number T11, a division T12 indicating whether the employee is a member of the employee's family, a relationship T13 with the employee, a name T14, a full name T15, and a gender T16. , Date of birth T17, personal number (my number) T18, and reference date T19 of data.

As shown in FIG. 3, the access authority management table T2 includes an employee number T21, a name T22, a user name T23 at login, a password T24 at login, basic HR operations, basic salary operations, social insurance operations, year-end adjustment operations, It has fields of each item T25 to T29 indicating whether or not there is an access right to each business of the tax related business.

As shown in FIG. 4, the business form related table T3 is an electronic form of each of the business name T31, withholding slip, insured qualification acquisition report, dependent deduction report, insurance deduction report, and gem change/calculation report. It has a field of each item T32 to T36 indicating whether or not there is an access right to.

As shown in FIG. 5, the form authority management table T4 is an item T421 indicating the presence or absence of more detailed access authority to the business name T41 and each electronic form (withholding form T42 and dependent deduction report T43 in the figure). .About.T428 and T431 to T438 fields. The items indicating the presence or absence of more detailed access authority to each electronic form are, specifically, print times T421, T431, print periods T422, T432, print targets T423, T433, inquiry counts T424, T434, inquiry period T425, These are T435, inquiry targets T426 and T436, storage periods T427 and T437, and disposal deadlines T428 and T438.

As shown in FIG. 6, the setting table T5 when the form authority is exceeded includes the type T51 of personal information, the print number excess T52 that shows the process when the print number is exceeded, the print period outside T53 that shows the process when the print period is outside, and the print target. Non-printing target T54 showing processing at outside time, inquiry count excess T55 showing processing at the time of inquiry count exceeding, inquiry outside period T56 showing processing at the time of outside inquiry period, outside inquiry target T57 showing processing at the time of outside inquiry period, Due to outside storage period T58 indicating processing outside the storage period, overdue deadline T59 indicating processing when the disposal deadline has expired, retired employee T60 indicating processing for a retired employee, leaver T61 indicating processing for a leaver, due to physical transfer, etc. It has a field of a former family T62, which indicates a process for a former family who has become a non-family.

Each of the personnel management server 2 and the my number management server 3 is composed of one or a plurality of servers deployed on the communication network N. In this embodiment, each management server is assumed to be composed of one management server, but may be composed of a plurality of server groups such as a WEB server, a DB server, and a storage server.

The printing device 4 is composed of, for example, an inkjet printer, a laser printer, or the like, and under the control of the control unit 11 of the client terminal 1, prints according to the processing content performed by the client terminal 1. For example, the printing device 4 prints out the electronic form displayed (referenced) on the client terminal 1.

[2. Description of operation]
Next, the operation of the my number management system 100 according to the present embodiment will be described with reference to FIGS.
First, with reference to the flowchart of FIG. 7, a process (electronic form creation process) in which the client terminal 1 and the personnel management server 2 create an electronic form will be described. This process is started when the control unit 11 of the client terminal 1 receives an input of login information (user name, password, etc.) necessary for accessing (login) the personnel management server 2.

First, the control unit 11 of the client terminal 1 transmits the input login information such as the user name and password to the personnel management server 2 via the communication unit 14 (step S101).

The control unit 21 of the personnel management server 2 performs processing (login authentication processing) for determining whether or not the user is a user registered in the personnel management server 2 based on the login information transmitted from the client terminal 1. (Step S102).
When determining that the user is a user registered in the personnel management server 2, the control unit 21 proceeds to the next step S103. On the other hand, when the control unit 21 determines that the user is not a user registered in the personnel management server 2, the control unit 21 notifies the client terminal 1 that login authentication has failed, and prompts the user to input login information again.

Next, the control unit 21 generates a screen (electronic form creation screen) for performing an operation for instructing the creation of an electronic form, and transmits it to the client terminal 1 via the communication unit 24 (step S103).

The control unit 11 of the client terminal 1 causes the display unit 13 to display the electronic form creation screen transmitted from the personnel management server 2 (step S104).
The user performs an operation for instructing the creation of the electronic form on the electronic form creation screen displayed on the display unit 13. Specifically, the user performs an operation of specifying the form type of the electronic form to be created, the information of the employee to be created, and the like.

Next, the control unit 11 transmits information (electronic form creation instruction information), which is designated by the user on the electronic form creation screen, for instructing the creation of the electronic form to the personnel management server 2 via the communication unit 14. (Step S105).

The control unit 21 of the personnel management server 2 creates an electronic form based on the electronic form creation instruction information sent from the client terminal 1, and sends it to the client terminal 1 via the communication unit 24 (step S106).
In the present embodiment, when the electronic form is created in step S106, the tag information is stored in the specific area for storing the my number (personal number) in the electronic form instead of the my number.
The tag information is information (search information) necessary for searching and obtaining the my number from the my number management server 3 when outputting the electronic form. Due to the nature of My Number, a high level of security is required.Therefore, tag information should be stored in the electronic form instead of My Number, and the tag information should be used as a search key when the electronic form is output. By obtaining the my number from the number management server 3, security can be ensured.
The tag information may be set in advance for each electronic form to be created, or the same content may be set regardless of the type of the electronic form.

The control unit 11 of the client terminal 1 causes the storage unit 15 to store the electronic form transmitted from the personnel management server 2 (step S107).

Next, a process (electronic form output process) in which the client terminal 1 and the my number management server 3 output (query/print) an electronic form will be described with reference to the flowcharts of FIGS. 8 and 9. This process is started when the control unit 11 of the client terminal 1 receives the activation operation of the electronic form viewer by the user.

First, the control unit 11 of the client terminal 1 displays the login screen on the display unit 13 (step S201). As shown in FIG. 10, the login screen G1 includes a user name input section G11 for inputting a user name, a password input section G12 for inputting a password, and a login button G13 for executing a login operation. Has been done.
The user executes the login operation by pressing the login button G13 after entering his or her own user name and password in the user name input section G11 and the password input section G12 on the login screen G1.

Next, the control unit 11 displays the work menu screen on the display unit 13 (step S202). As shown in FIG. 11, the business menu screen G2 displays a menu classification display area G21 that displays the classification of the business menu and a menu that displays items (electronic forms) corresponding to the business menu selected in the menu classification display area G21. An item display area G22 and an end button G23 for ending the operation on the task menu screen G2 are provided. In the menu classification display area G21, the job information management menu G211, the salary information management menu G212, the personnel report management menu G213, and the salary report management menu G214 are displayed.
On the business menu screen G2, the user selects one business menu from the menu classification display area G21, and then selects one electronic business form from the electronic business forms displayed in the menu item display area G22. FIG. 11 shows an example in which the user selects the payroll form management menu G214. When the payroll form management menu G214 is selected, in the menu item display area G22, as the electronic form corresponding to the payroll form management menu G214, the withholding slip G221, the dependent deduction report G222, the monthly change/calculation notice G223,... Etc. are displayed in a selectable manner. In the following processing, it is assumed that the “deduction deduction report G222” is selected from the electronic forms displayed in the menu item display area G22.

Next, the control unit 11 determines whether or not any one of the electronic forms is selected by the user on the work menu screen G2 (step S203).
When the control unit 11 determines that one of the electronic forms has been selected (step S203: YES), the control unit 11 proceeds to the next step S204.
On the other hand, when the control unit 11 determines that none of the electronic forms has been selected (step S203: NO), the process ends. Here, the case where no electronic form is selected indicates the case where the end button G23 of the work menu screen G2 is pressed without selecting any electronic form.

Next, the control unit 11 reads the electronic form selected by the user from the storage unit 15 as a storage unit (step S204). That is, the control unit 11 functions as the reading means of the present invention.

Next, the control unit 11 transmits the electronic form inquiry authority confirmation request read in step S204 to the my number management server 3 via the communication unit 14 (step S205). The inquiry authorization confirmation request includes login information such as the user name and password entered on the login screen G1, and various pieces of information such as the electronic form selected on the job menu screen G2.

The control unit 31 of the my number management server 3 performs inquiry authority confirmation processing based on the inquiry authority confirmation request transmitted from the client terminal 1 in step S205 (step S206).

Specifically, first, the control unit 31, as shown in the flowchart of FIG. 12, the login information transmitted from the client terminal 1 and the access right management table T2 (see FIG. 3) stored in the storage unit 35. , Are collated with each other to extract the business for which the login user has access authority (step S301). For example, if the login user is "Taro Hitoru (user name: taro, password: Qsad2330)", the tasks that have access rights are "HR basic business", "Basic salary business", "Social insurance business", "End of year" "Adjustment work" and "tax-related work" are extracted. If the logged-in user is “Office Hanako (user name: hanako, password: Amnm7756)”, “year-end adjustment work” is extracted as the work having access authority.

Next, the control unit 31 compares the electronic form transmitted from the client terminal 1 with the business form related table T3 (see FIG. 4) stored in the storage unit 35, and the access authority to the electronic form is confirmed. The assigned "business" is extracted (step S302). For example, when the electronic form is a "deduction for dependents", "basic salary business" and "year-end adjustment business" are extracted as businesses to which access authority is assigned.

Next, the control unit 31 matches the electronic form transmitted from the client terminal 1 with the business extracted in step S301 and the business extracted in step S302 (that is, the login user is transmitted from the client terminal 1). (Businesses having access authority to the electronic form), the current date and time, and the form authority management table T4 stored in the storage unit 35 (see FIG. 5) are collated to check the electronic form transmitted from the client terminal 1. It is determined whether the discard deadline has been exceeded (step S303). For example, if the logged-in user is “Taro Hitoro” and the electronic form transmitted from the client terminal 1 is “Dependent tax exemption form”, in step S301, “Basic personnel business”, “Basic salary business”, “Social insurance business” , “Year-end adjustment work”, and “tax-related work” are extracted, and in step S302, “salary basic work” and “year-end adjustment work” are extracted. Then, the discard deadlines of the “salary basic business” and the “year-end adjustment business” that match each other are extracted by referring to the form authority management table T4 (“salary basic business=10 years”, “year-end adjustment business=8 years”). "). When the disposal deadlines of a plurality of jobs are extracted as in this example, the longer disposal deadline (10 years in this embodiment) is preferentially extracted. Finally, the storage start date of the electronic form is compared with the current date and time to determine whether or not the extracted disposal deadline has passed.
When the control unit 31 determines that the discard deadline of the electronic form transmitted from the client terminal 1 is exceeded (step S303: YES), a screen for notifying the user that the discard deadline has been exceeded (discard deadline) An excess screen) is generated (step S304), and the process proceeds to step S207 in FIG.
On the other hand, when the control unit 31 determines that the expiration date of the electronic form transmitted from the client terminal 1 is not exceeded (step S303: NO), the process proceeds to step S305.

Next, the control unit 31 stores the electronic form transmitted from the client terminal 1, the work that matches the work extracted in step S301 and the work extracted in step S302, the current date and time, and the storage unit 35. The form authority management table T4 (see FIG. 5) is collated to determine whether the logged-in user has the inquiry authority of the electronic form transmitted from the client terminal 1 (step S305). Specifically, the control unit 31 has the inquiry authority when the inquiry can be made in any of the number of inquiries of the electronic form transmitted from the client terminal 1, the inquiry period, and the inquiry target. It is determined that However, in the present embodiment, as shown in the setting table T5 when the form authority is exceeded in FIG. 6, the number of inquiries and the item to be inquired can be inquired at least partially in any situation (inquiries cannot be made). Therefore, if the item of the inquiry period is within the inquiry period, it is determined that the user has the inquiry authority. The inquiry period is bound by the storage period. That is, the inquiry period is valid within the storage period. Here, the storage period is a period corresponding to the expiration date in business, unlike the disposal period corresponding to the legal storage period.

For example, similar to the example shown in step S303, when the login user is “Taro Hitoru” and the electronic form transmitted from the client terminal 1 is “Dependent tax deduction report G222”, “Basic salary work”, “Year-end adjustment” The reference period and the storage period of “work” are extracted by referring to the form authority management table T4 (“basic salary work=unlimited, 10 years”, “year-end adjustment work=October to next March, 5 years”). Then, it is determined whether or not the current date and time is within the extracted storage period and the inquiry period. As in this example, when the inquiry period and storage period of a plurality of jobs are extracted, if the current date and time is within the storage period and inquiry period of any job, it is determined that the user has inquiry authority. ..
When the control unit 31 determines that the logged-in user has the authority to inquire the electronic form transmitted from the client terminal 1 (step S305: YES), the control unit 31 proceeds to the next step S306.
On the other hand, when the control unit 31 determines that the logged-in user does not have the inquiry authority of the electronic form transmitted from the client terminal 1 (step S305: NO), it notifies the logged-in user that the logged-in user does not have the inquiry authority. A screen (query error screen) for doing is generated (step S307).

In step S306, the control unit 31 collates the content of the inquiry authority of the logged-in user with the form authority excess time setting table T5 (see FIG. 6) stored in the storage unit 35 to obtain the specific inquiry content. Is determined, and inquiry information based on the inquiry content is generated. In the present embodiment, as the content of the inquiry authority possessed by the logged-in user, when all the items of the inquiry frequency, inquiry period, and inquiry target are satisfied (complete inquiry authority), at least one of the inquiry count and the inquiry target If the item does not meet the conditions (conditional inquiry authority), two are assumed. When the logged-in user has the full inquiry authority, all the information including the My Number information is determined as the inquiry content. On the other hand, if the logged-in user has conditional inquiry authority (exceeds the number of inquiries and is not subject to inquiries), as shown in FIG. 6, information other than my number information (other information) remains unchanged, Information in which the my number is replaced with the unreadable replacement character string “*” is determined as the inquiry content.
That is, when the my number is already described in the predetermined item in the electronic form read in step S204, the control unit 31 determines the predetermined item based on the read purpose (business) and the expiration date of the read purpose. It functions as a control means for controlling whether to display the my number in a readable manner or the my number with an unreadable replacement character string.

At the time of the process of step S306, the current status information of the owner of the personal information included in the electronic ledger (ledger) may be acquired, and the processing for the electronic ledger may be controlled based on the acquired current status information. Here, as the current status information of the owner of the personal information, for example, the owner of the personal information has retired (retired person), has taken a leave of absence (leave of absence), has become a non-family member due to physical transfer, etc. And so on.
When performing the above control, the control unit 31 inquires the current status information of the owner of the personal information included in the electronic form to the personnel management server 2 when performing the processing of step S306, and transmits the current status information transmitted from the personnel management server 2. And the table T5 when the form authority is exceeded are compared with each other to control the process for the electronic form. For example, if the current status information of the owner of the personal information contained in the electronic form is "Retired person" or "Former family", the information other than the owner's My Number information (other information) remains unchanged and the My Number information is displayed. The information replaced with the replacement character string “*” is determined as the inquiry content. In addition, when the current status information of the owner of the personal information included in the electronic form is “leave of absence”, all the information including the personal number information of the owner is determined as the inquiry content.

Next, in step S207 of FIG. 8, the control unit 31 transmits the information (inquiry information) or screen (disposal deadline exceeded screen or inquiry error screen) generated in the inquiry authority confirmation process of step S206 via the communication unit 34. And sends it to the client terminal 1.

The control unit 11 of the client terminal 1 determines whether the inquiry information has been transmitted from the my number management server 3 in step S207 (step S208).
When the control unit 11 determines that the inquiry information is transmitted from the my number management server 3 (step S208: YES), the control unit 11 proceeds to next step S209.
On the other hand, when the control unit 11 determines that the inquiry information has not been transmitted from the my number management server 3 (that is, the discard number expiration screen or the inquiry error screen has been transmitted from the my number management server 3) (step S208). : NO), and proceeds to step S210.

In step S209, the control unit 11 displays a screen (form inquiry screen) for referring to the electronic form selected on the business menu screen G2 based on the inquiry information transmitted from the my number management server 3. Is displayed, and the process proceeds to step S211.

FIG. 13 and FIG. 14 show an example of the form inquiry screen G3 for referring to the dependent deduction report. As shown in FIGS. 13 and 14, the form inquiry screen G3 displays a form display area G31 for displaying an electronic form to be inquired, a print button G32, and an operation on the form inquiry screen G3 after finishing the operation on the form inquiry screen G3. A return button G33 for returning and an end button G34 for ending an operation in a series of electronic form output processing are provided.
In the form display area G31, a dependent deduction report F1 which is an electronic form is displayed. The dependent deduction report F1 is configured to include a personal information display area F11 that displays the personal information of the employee himself and a family information display area F12 that displays the personal information of the employee's family.
In the personal information display area F11, in addition to each area that displays the work place, work address, name, date of birth, address, presence of spouse, etc., a personal number display area that displays the personal number of the employee himself/herself (Predetermined item) F111 is included.
In the family information display area F12, in addition to areas for displaying the names, dates of birth, estimated income, etc. of spouses and dependents subject to dependent deductions, spouses and dependents eligible for dependent deductions are also listed. A personal number display area (predetermined item) F121 for displaying the personal number is included.
In each of the above-mentioned My Number display area F111 and My Number display area F121, the tag information stored at the time of creating the electronic form (dependence deduction report F1) is stored, and transmitted from the My Number management server 3. Inquiry information (My number or replacement character string “*”) is displayed. In addition, when the my number is not described in the electronic form selected by the user, each of the my number display area F111 and the my number display area F121 is displayed blank.

For example, the example shown in FIG. 13 is an example of the form inquiry screen G3 for inquiring the dependent deduction report F1 of the employee “Taro Tanaka”, and the form inquiry screen when the login user has the full inquiry authority. G3 is shown. In this case, in step S306 of FIG. 12, since all the information including the my number information is determined as the inquiry content, the my number “111111111111” of the employee “Taro Tanaka” himself is displayed in the my number display area F111. In addition to being displayed, the personal number “222222222222” of “Tanaka Hanako” who is the family (spouse) of the employee “Taro Tanaka” is displayed in the personal number display area F121.

In addition, the example shown in FIG. 14 is an example of a form inquiry screen G3 for inquiring of the dependent deduction report F1 of the employee “Taro Tanaka”, and the form inquiry when the login user has the conditional inquiry authority. The screen G3 is shown. In this case, in step S306 of FIG. 12, information other than the my number information (other information) is left unchanged, and the information obtained by replacing the my number information with the replacement character string “*” is determined as the inquiry content. The replacement character string “*” is displayed instead of the my number in both the my number display area F111 and the my number display area F121.

In step S210, the control unit 11 causes the display unit 13 to display the screen (disposal time limit excess screen or inquiry error screen) transmitted from the my number management server 3, and proceeds to step S218. In step S210, the control unit 11 also performs a process of deleting an electronic form that has exceeded the disposal deadline when displaying the disposal deadline exceeded screen on the display unit 13.

FIG. 15 shows an example of the discard deadline exceeded screen G4. As shown in FIG. 15, the discard deadline excess screen G4 includes a discard deadline excess display part G41 for notifying the user that the discard deadline has been exceeded, an OK button G42 for ending the operation on the discard deadline excess screen G4, and And an end button G43 for ending the operation in the series of electronic form output processing.
On the discard deadline exceeded screen G4, the user presses the OK button G42 when ending the operation on the discard deadline exceeded screen G4. On the other hand, when ending the operation in the series of electronic form output processing, the end button G43 is pressed.

FIG. 16 shows an example of the inquiry error screen G5. As shown in FIG. 16, the inquiry error screen G5 includes an inquiry error display portion G51 for notifying the login user that the user does not have inquiry authority, an OK button G52 for ending the operation on the inquiry error screen G5, and a series of And an end button G53 for ending the operation in the electronic form output process.
On the inquiry error screen G5, the user presses the OK button G52 to end the operation on the inquiry error screen G5. On the other hand, to end the operation in the series of electronic form output processing, the end button G53 is pressed.

In step S211, the control unit 11 determines whether or not the print button G32 is pressed by the user on the form inquiry screen G3.
When determining that the print button G32 has been pressed (step S211: YES), the control unit 11 proceeds to the next step S212.
On the other hand, when the control unit 11 determines that the print button G32 is not pressed (step S211: NO), the control unit 11 proceeds to step S218.

In step S212, the control unit 11 transmits a print authority confirmation request for the electronic form selected by the user to the my number management server 3 via the communication unit 14. Note that the print authority confirmation request includes the login information such as the user name and password input on the login screen G1 as well as the electronic form information selected on the job menu screen G2, similarly to the inquiry authority confirmation request. There is.

The control unit 31 of the my number management server 3 performs the print authority confirmation process based on the print authority confirmation request transmitted from the client terminal 1 in step S212 (step S213).

Specifically, first, the control unit 31 performs the processes of step S401 and step S402 as shown in the flowchart of FIG. Note that the processes of steps S401 and S402 are the same as the processes of steps S301 and S302 of FIG. 12 showing the inquiry authority confirmation process, and therefore description thereof will be omitted.

Next, the control unit 31 stores the electronic form transmitted from the client terminal 1, the work that matches the work extracted in step S401 and the work extracted in step S402, the current date and time, and the storage unit 35. The form authority management table T4 (see FIG. 5) is collated to determine whether or not the logged-in user has the print authority for the electronic form transmitted from the client terminal 1 (step S403). Specifically, the control unit 31 has the print authority when any of the print count, print period, and print target of the electronic form transmitted from the client terminal 1 can be printed. It is determined that However, in this embodiment, as shown in the setting table T5 when the document authority is exceeded in FIG. 6, the number of prints and the item to be printed can be printed at least partially in any situation (if printing is not possible, Therefore, if the item of the print period is within the print period, it is determined that the user has the print authority. The printing period is restricted to the storage period, like the inquiry period. That is, the printing period is valid within the storage period.

For example, when the login user is “Taro Taro” and the electronic form transmitted from the client terminal 1 is “Dependent tax return declaration G222”, as in the example shown in step S303 of FIG. 12, “basic salary work”, The printing period and storage period of the “year-end adjustment work” are extracted by referring to the form authority management table T4 (“salary basic work=unlimited, 10 years”, “year-end adjustment work=November to next February, 5 years”). "). Then, it is determined whether the current date and time is within the extracted storage period and printing period. When the print period and the storage period of a plurality of jobs are extracted as in this example, if the current date and time is within the storage period and the print period of any job, it is determined that the user has the print authority. ..
When the control unit 31 determines that the logged-in user has the print authority for the electronic form transmitted from the client terminal 1 (step S403: YES), the control unit 31 proceeds to the next step S404.
On the other hand, when the control unit 31 determines that the login user does not have the print authority for the electronic form transmitted from the client terminal 1 (step S403: NO), the control unit 31 notifies the login user that the login user does not have the print authority. A screen (print error screen) for performing is generated (step S405).

In step S404, the control unit 31 compares the content of the print authority of the logged-in user with the form authority excess time setting table T5 (see FIG. 6) stored in the storage unit 35, and the specific print content. Is determined, and printing information based on the printing content is generated. In the present embodiment, as the content of the print authority of the logged-in user, if any of the items of the number of prints, the print period, and the print target is satisfied (full print authority), at least one of the number of prints and the print target is set. When the item does not meet the conditions (conditional print authority), two are assumed. When the logged-in user has the full print authority, all the information including the My Number information is determined as the print content. On the other hand, when the logged-in user has the conditional print authority (excessive number of prints, non-print target), as shown in FIG. 6, information other than my number information (other information) is replaced, and my number information is replaced. The information replaced with the character string “*” is determined as the print content.

At the time of the processing of step S404, as in the case of the processing of step S306, the current status information of the owner of the personal information included in the electronic ledger (ledger) is acquired, and the processing for the electronic ledger is controlled based on the acquired current status information. You can
When performing the above control, the control unit 31 inquires the current status information of the owner of the personal information included in the electronic form to the personnel management server 2 when performing the processing of step S404, and transmits the current status information transmitted from the personnel management server 2. And the table T5 when the form authority is exceeded are compared with each other to control the process for the electronic form.

Next, in step S214 of FIG. 9, the control unit 31 transfers the information (print information) or the screen (print error screen) generated in the print authority confirmation processing of step S213 to the client terminal 1 via the communication unit 34. Send.

The control unit 11 of the client terminal 1 determines whether or not the printing information is transmitted from the my number management server 3 in step S214 (step S215).
When the control unit 11 determines that the print information is transmitted from the my number management server 3 (step S215: YES), the control unit 11 proceeds to the next step S216.
On the other hand, when the control unit 11 determines that the print information is not transmitted from the my number management server 3 (that is, the print error screen is transmitted from the my number management server 3) (step S215: NO), the step The process moves to S217.

In step S216, the control unit 11 performs a process (form printing process) of printing the electronic form displayed (referenced) on the form reference screen G3 based on the printing information transmitted from the my number management server 3. In this embodiment, as shown in the setting table T5 when the form authority is exceeded in FIG. 6, the inquiry content and the printing when the logged-in user has the conditional inquiry authority (inquiry/print count excess, inquiry/print not subject) Since the contents are the same, the contents of the electronic form displayed in the form display area G31 of the form inquiry screen G3 are printed as they are on the printing paper. Therefore, for example, when the form printing process is performed on the form inquiry screen G3 shown in FIGS. 13 and 14, the dependent deduction report F1 shown in FIGS. 13 and 14 is printed, respectively.

In step S217, the control unit 11 causes the display unit 13 to display the screen (print error screen) transmitted from the my number management server 3.

FIG. 18 shows an example of the print error screen G6. As shown in FIG. 18, the print error screen G6 includes a print error display portion G61 for notifying the login user that the user does not have print authority, an OK button G62 for ending the operation on the print error screen G6, and a series of And an end button G63 for ending the operation in the electronic form output process.
On the print error screen G6, the user presses the OK button G62 when ending the operation on the print error screen G6. On the other hand, to end the operation in the series of electronic form output processing, the end button G63 is pressed.

In step S218, the control unit 11 causes the user to end the button (G34, G42, It is determined whether G52 or G62) has been pressed.
When determining that the end button has been pressed by the user (step S218: YES), the control unit 11 ends the process.
On the other hand, when the control unit 11 determines that the end button has not been pressed by the user (step S218: NO), the control unit 11 proceeds to step S202 and causes the display unit 13 to display the work menu screen G2 again. Here, the case where the end button is not pressed by the user means that the return button G33 or OK button (without pressing the end button (G34, G42, G52 or G62) of the screen displayed on the display unit 13 G41, G51, or G61) is pressed.

[3. effect]
As described above, according to the form management apparatus (the client terminal 1 and the my number management server 3) of the my number management system 100 according to the present embodiment, the electronic form having a predetermined item in which the my number is described is stored. If the my number is already written in a predetermined item in the electronic form read out from the unit 15, whether to display the my number in the predetermined item in a readable manner based on the expiration date of the electronic form Alternatively, it controls whether or not the my number is displayed as an unreadable replacement character string.
Therefore, even in the case where the file belonging to the management of the administrator is duplicated and held in the user's own terminal, the reading of the My Number can be appropriately controlled according to the expiration date of the electronic form. .. Therefore, it is possible to reduce complexity of data management and reduce data management load while ensuring sufficient security in data management.

Particularly, in the present embodiment, it is controlled whether the my number is displayed in a readable manner or the my number is displayed in an unreadable replacement character string in a predetermined item based on the read purpose and the expiration date of the read purpose. ..
Therefore, even in the case where a file belonging to the management of the administrator is duplicated and held in the user's own terminal, it is possible to appropriately set the deadline relating to the My Number for each work of the user. Therefore, it is possible to reduce complexity of data management and reduce data management load while ensuring sufficient security in data management.

Further, in the present embodiment, when the electronic form is displayed on the display unit 13, the present condition information of the owner of the personal information included in the electronic form is further acquired, and the process for the electronic form is controlled based on the acquired present condition information. To do.
Therefore, it is possible to prevent the personal information of the person who does not need to output the personal information from being output unnecessarily, so that the security in the data management can be more surely ensured.

The specific description has been given above based on the embodiment according to the present invention, but the present invention is not limited to the above-described embodiment, and can be modified without departing from the gist thereof.

[4. Modification 1]
For example, in the above embodiment, when an electronic form that has exceeded the disposal deadline, which is the expiration date of the electronic form, is to be displayed, the electronic form is unconditionally deleted without being displayed. It is not limited. For example, when an electronic form that has exceeded the disposal deadline is to be displayed, the electronic form may be displayed once and then deleted. The configurations of the client terminal 1, the personnel management server 2, the my number management server 3, and the printing device 4 that configure the my number management system 100 according to the modified example 1 are the same as those of the embodiment, so that the description will be simplified. Therefore, the same reference numerals are given and detailed description thereof is omitted.
Hereinafter, the electronic form output process of the My Number management system 100 according to the first modification will be described with reference to the flowcharts of FIGS. 19 and 20.

First, the control unit 11 of the client terminal 1 performs the processes of steps S501 to S504. Note that the processes of steps S501 to S504 are the same as the processes of steps S201 to S204 of FIG. 8 in the embodiment, so description thereof will be omitted.

Next, the control unit 11 sends the request for confirmation of the expiration date of the electronic form read in step S404 to the my number management server 3 via the communication unit 14 (step S505). The discard deadline confirmation request includes information such as the electronic form selected on the job menu screen G2.

Based on the discard deadline confirmation request transmitted from the client terminal 1 in step S505, the control unit 31 of the my number management server 3 determines whether or not the discard deadline of the electronic form transmitted from the client terminal 1 has been exceeded (ie, , Whether or not the electronic form has expired) (step S506). Specifically, the control unit 31 collates the electronic form transmitted from the client terminal 1 with the form authority management table T4 (see FIG. 5) stored in the storage unit 35 and transmits the electronic form from the client terminal 1. It is determined whether or not the disposal deadline of the created electronic form has expired. For example, when the electronic form transmitted from the client terminal 1 is a "deduction for tax exemption for dependents", the disposal deadline (10 years) of the tax exemption for dependents is extracted. Then, the storage start date of the electronic form is compared with the current date and time to determine whether or not the extracted disposal deadline has passed.
When the control unit 31 determines that the discard time limit of the electronic form transmitted from the client terminal 1 is exceeded (step S506: YES), it generates the inquiry information for discard (step S507), and proceeds to step S509. And transition. The information for inquiry for discarding is information in which the information other than the my number information (other information) is left unchanged and the my number information is replaced with the replacement character string “*”.
On the other hand, when the control unit 31 determines that the discard period of the electronic form transmitted from the client terminal 1 has not been exceeded (step S506: NO), normal inquiry information is generated (step S508), and step S509. Transition to. Normal inquiry information is all information including my number information.

Next, the control unit 31 transmits the information (inquiry information for discarding or normal inquiry information) generated in step S507 or step S508 to the client terminal 1 via the communication unit 34 (step S509). ..

The control unit 11 of the client terminal 1 determines whether or not the inquiry information for discarding has been transmitted from the my number management server 3 in step S509 (step S510).
When the control unit 11 determines that the inquiry information for discarding has been transmitted from the my number management server 3 (step S510: YES), the process proceeds to step S512.
On the other hand, when the control unit 11 determines that the inquiry information is not transmitted from the my number management server 3 (that is, the normal inquiry information is transmitted from the my number management server 3) (step S510: NO). A screen (normal form inquiry screen) for inquiring the electronic form read in step S504 based on the normal inquiry information is displayed on the display unit 13 (step S511), and the process proceeds to step S517. .. On the normal form inquiry screen displayed in step S511, normal inquiry information, that is, all information including my number information is displayed (see FIG. 13). In addition, when the my number is not described in the electronic form selected by the user, each of the my number display area F111 and the my number display area F121 is displayed blank.

In step S512, the control unit 11 causes the display unit 13 to display a screen (inquiry form inquiry screen) for inquiring the electronic form read in step S504 based on the inquiry information for discarding. On the discarding form inquiry screen displayed in step S512, the discarding inquiry information, that is, the information (other information) other than the My Number information is left unchanged, and the My Number information is changed to the replacement character string "*". The replaced information is displayed (see FIG. 14). In addition, when the my number is not described in the electronic form selected by the user, each of the my number display area F111 and the my number display area F121 is displayed blank.

Next, the control unit 11 displays a confirmation screen (deletion confirmation screen) for confirming with the user whether or not to delete the electronic form read in step S504 at a predetermined position on the form inquiry screen for disposal. It is displayed (step S513). That is, the control unit 11 functions as the display control means of the present invention. As shown in FIG. 21, the deletion confirmation screen G7 is provided with an OK button G71 for executing an electronic form deletion operation and a cancel button G72 for canceling the electronic form deletion operation. ..
The user presses the OK button G71 on the deletion confirmation screen G7 when executing the deletion operation of the electronic form. On the other hand, to cancel the electronic form deletion operation, the cancel button G72 is pressed.

Next, the control unit 11 determines whether or not the OK button G71 is pressed by the user on the deletion confirmation screen G7 (step S514).
When determining that the OK button G71 has been pressed (step S514: YES), the control unit 11 deletes the electronic form read in step S504 (step S515) and proceeds to step S517. That is, the control unit 11 functions as the deleting unit of the present invention.
On the other hand, when the control unit 11 determines that the OK button G71 has not been pressed (that is, the cancel button G72 has been pressed) (step S514: NO), the electronic form read in step S504 is to be saved. The electronic form is stored in the storage unit 15 (step S516), and the process proceeds to step S517. That is, the control unit 11 functions as the storage control unit of the present invention.

Next, the control unit 11 determines whether or not the print button G32 is pressed by the user on the form inquiry screen G3 (step S517).
When determining that the print button G32 has been pressed (step S517: YES), the control unit 11 proceeds to the next step S518.
On the other hand, when the control unit 11 determines that the print button G32 is not pressed (step S517: NO), the control unit 11 proceeds to step S519.

In step S518, the control unit 11 performs a process (form printing process) of printing the electronic form displayed (referenced) on the form reference screen G3. The contents of the electronic form displayed in the form display area G31 of the form inquiry screen G3 are printed on the printing paper as they are. Therefore, for example, when the form printing process is performed on the form inquiry screen G3 shown in FIGS. 13 and 14, the dependent deduction report F1 shown in FIGS. 13 and 14 is printed, respectively.

In step S519, the control unit 11 determines whether or not the end button G34 is pressed by the user on the form inquiry screen G3.
When determining that the end button G34 has been pressed by the user (step S519: YES), the control unit 11 ends the process.
On the other hand, when the control unit 11 determines that the user has not pressed the end button G34 (step S519: NO), the control unit 11 proceeds to step S502 and causes the display unit 13 to display the work menu screen G2 again. Here, the case where the end button G34 is not pressed by the user indicates the case where the return button G33 is pressed without pressing the end button G34 of the form inquiry screen G3.

As described above, in the modified example 1, when the my number is already described in the predetermined item in the read electronic form and the discard deadline (expiration date of the electronic form) has expired, , My number is displayed as an unreadable replacement character string, and then the electronic form is deleted from the storage unit 15.
Therefore, it is possible to prevent the electronic form that is not obligated to be stored from being kept in the terminal while notifying that the expiration date has expired by displaying the electronic form once with security. Therefore, information leakage can be suppressed without confusing the user.

In Modification 1, if the user's operation instructs to cancel the deletion of the electronic form when My Number is displayed as an unreadable replacement character string, the electronic form is stored as the electronic form to be saved. It is stored in the unit 15.
Therefore, the user can selectively store and delete the electronic form according to need, and thus can manage data flexibly.

In the first modification, when the my number is displayed as an unreadable replacement character string, a confirmation screen is displayed to ask the user whether or not to delete the displayed electronic form.
Therefore, the user can determine whether to store or delete the electronic form in real time at the timing when the electronic form is displayed once, and thus data management according to the situation can be performed while ensuring operability.

(Other modifications)
Further, in the above-described embodiment, the contents of the output (inquiry/print) authority of the logged-in user are compared with the form authority excess setting table T5 (see FIG. 6) to determine the specific output content. However, the present invention is not limited to this. That is, the content of the form authority excess setting table T5 is an example, and other content may be used. Hereinafter, some examples different from the contents of the form authority excess setting table T5 will be illustrated, but these are also examples and are not particularly limited.

For example, when the number of remaining prints of the electronic form is "0", the inquiry of the electronic form is permitted, but the printing may be prohibited.
If the storage period of the electronic form has expired, the output (inquiry/print) of the electronic form may be prohibited, and the electronic form may be automatically deleted.
Further, when the number of remaining inquiries of the electronic form is “0”, the electronic form may be automatically deleted.
Further, when the number of remaining inquiries of the electronic form is “0”, the inquiry may be permitted for information other than the my number information included in the electronic form, and the inquiry for the my number information may be prohibited. ..
Further, when the number of remaining inquiries of the electronic form is “0”, the tag information stored in the specific area storing the my number in the electronic form may be automatically deleted.
In addition, when displaying the electronic form (ledger) on the display unit 13, when the current status information (personnel information) of the employee described in the ledger is acquired and a retiree has occurred, the retired person in the ledger is acquired. Alternatively, only the page may be automatically deleted.
In addition, when displaying the electronic form (ledger) on the display unit 13, when the current status information (personnel information) of the employee described in the ledger is acquired and a retiree has occurred, the retired person in the ledger is acquired. May be replaced with an alternative page (for example, a page indicating that the employee has already retired).

In the above embodiment, the client terminal 1, the personnel management server 2, and the my number management server 3 are illustrated as separate devices, but the present invention is not limited to this. For example, any two of the client terminal 1, the personnel management server 2 and the my number management server 3 may be configured as an integrated device, or the client terminal 1, the personnel management server 2 and the my number management. All of the servers 3 may be configured as an integrated device.

Further, each aspect shown in the present application can be understood as a method, a program, or the like. Regarding the category of the method or program, the “means” shown in the category of the device are appropriately replaced with, for example, “process” or “step”. Further, the order of the processes and steps is not limited to the one specified directly in the present application, and the order may be changed, or a part of the processes may be collectively executed or may be changed so as to be executed part by part as needed.

In addition, the detailed configuration of each device that constitutes the client terminal, the personnel management server, the my number management server, and the printing device and the detailed operation of each device can be appropriately changed without departing from the spirit of the present invention. ..

Although some embodiments of the present invention have been described, the scope of the present invention is not limited to the above-described embodiments and includes the scope of the invention described in the claims and the scope of equivalents thereof.
The inventions described in the scope of the claims attached first to the application for this application will be additionally described below. The claim numbers listed in the appendices are as set forth in the claims originally attached to the application for this application.
[Appendix]
<Claim 1>
Reading means for reading from the storage means an electronic form having a predetermined item in which my number is described;
When the my number is already described in the predetermined item in the electronic form read by the reading means, the my number can be read in the predetermined item based on the expiration date of the electronic form. Control means for controlling whether to display or to display the my number with an unreadable replacement character string,
Form management device equipped with.
<Claim 2>
The control means displays the my number in the predetermined item in a readable manner based on the reading purpose of the reading means and the expiration date of the reading purpose, or displays a replacement character string in which the my number is unreadable. The form management apparatus according to claim 1, which controls whether to display the form.
<Claim 3>
When the my number is already described in the predetermined item in the electronic form read by the reading means and the expiration date of the electronic form has expired, the control means sets the Display the number as an unreadable replacement character string,
The form management apparatus according to claim 1, further comprising a deleting unit that deletes the electronic form from the storage unit after the control unit displays the my number as an unreadable replacement character string.
<Claim 4>
When the control unit displays the my number in an unreadable replacement character string and the user instructs to cancel the deletion of the electronic form, the electronic form is stored as the electronic form to be saved. The form management apparatus according to claim 3, further comprising a storage control unit that causes the storage unit to store the storage control unit.
<Claim 5>
Display control means for displaying a confirmation screen for confirming to the user whether or not to delete the displayed electronic form when the control means displays the my number as an unreadable replacement character string; The form management apparatus according to claim 3, further comprising:
<Claim 6>
Computer,
Reading means for reading from the storage means an electronic form having a predetermined item in which my number is described,
When the my number is already described in the predetermined item in the electronic form read by the reading means, the my number can be read in the predetermined item based on the expiration date of the electronic form. Control means for controlling whether to display or to display the my number with an unreadable replacement character string,
Program to function as.

100 My Number Management System 1 Client Terminal 11 Control Unit (Reading Unit, Display Control Unit, Deleting Unit, Storage Control Unit)
12 operation unit 13 display unit 14 communication unit 15 storage unit (storage means)
2 personnel management server 21 control unit 22 operation unit 23 display unit 24 communication unit 25 storage unit 3 my number management server (form management device)
31 control unit (control means)
32 operation unit 33 display unit 34 communication unit 35 storage unit 4 printing device N communication network

Claims (6)

Reading means for reading from the storage means an electronic form having a predetermined item in which my number is described;
When the my number is already described in the predetermined item in the electronic form read by the reading means, the my number can be read in the predetermined item based on the expiration date of the electronic form. Control means for controlling whether to display or to display the my number with an unreadable replacement character string,
Deleting means for deleting the electronic form from the storage means after the control means displays the my number as an unreadable replacement character string,
Form management device equipped with. The control means displays the my number in the predetermined item in a readable manner based on the reading purpose of the reading means and the expiration date of the reading purpose, or displays a replacement character string in which the my number is unreadable. The form management apparatus according to claim 1, which controls whether to display the form. When the my number is already described in the predetermined item in the electronic form read by the reading means and the expiration date of the electronic form has expired, the control means sets the form management apparatus according to claim 1 or 2 makes the display in non replacement string reads number. When the control unit displays the my number in an unreadable replacement character string and the user instructs to cancel the deletion of the electronic form, the electronic form is stored as the electronic form to be saved. The form management apparatus according to claim 1, further comprising a storage control unit that stores the storage unit. Display control means for displaying a confirmation screen for confirming to the user whether or not to delete the displayed electronic form when the control means displays the my number as an unreadable replacement character string; The form management apparatus according to claim 1, further comprising: The form management computer
Reading means for reading from the storage means an electronic form having a predetermined item in which my number is described,
When the my number is already described in the predetermined item in the electronic form read by the reading means, the my number can be read in the predetermined item based on the expiration date of the electronic form. Control means for controlling whether to display or to display the my number with an unreadable replacement character string,
Deleting means for deleting the electronic form from the storage means after the control means displays the my number as an unreadable replacement character string,
Program to function as.

Images