JP6865627B2 - Station affairs equipment for staff and station affairs equipment system for staff with a function to prevent unauthorized reference of personal information - Google Patents

Description

An embodiment of the present invention relates to a staff station service device and a staff station service system having a function of preventing unauthorized reference to personal information.

In recent years, the automation of station affairs equipment has progressed, and passengers and other users have come to be able to receive various services. However, when the staff refers to personal information such as the name, age, telephone number or date of birth of passengers, etc., in the station affairs equipment for staff that has been installed at the station window in the past, that is the case. Was not understood by the user. Furthermore, since it was possible for the staff to print the personal information on a form and use it illegally without giving it to the user, there was a request to prevent unauthorized use by the printing or the like.

As a known technique related to the present invention, when a staff member uses the station affairs equipment connected to the server, the server authenticates the identification information of the staff member and the face image which is the ecological information, and the authentication is successful. Only By permitting the use of station affairs equipment, a method of suppressing spoofing of a staff member is known (see, for example, Patent Document 1).

Japanese Unexamined Patent Publication No. 2016-151948

The method described in Patent Document 1 described above is an invention of a method for authenticating a staff member who performs business in station affairs equipment, and has an effect of preventing spoofing by a third party. However, the invention described in Patent Document 1 has a security problem because the person in charge can illegally refer to or print the personal information of the user for an illegal purpose.

The present invention has been made to solve the above-mentioned problems, and when a staff member operates a staff station service device installed at a station window, the name, which is highly secure user's personal information, When displaying the age, telephone number, date of birth, etc., or when printing the screen on which the personal information is displayed, it is necessary to authenticate multiple persons by multiple staff members registered for each business, and the use When displaying or printing a person's personal information, the station affairs for staff equipped with a personal information unauthorized reference prevention function that prevents unauthorized reference of personal information by notifying the user by voice guidance and display. The purpose is to provide equipment and station affairs equipment systems for staff.

In order to achieve the above object, the station affairs equipment for staff members having the personal information unauthorized reference prevention function according to claim 1 of the present invention is installed at the station window, and the staff members respond to requests from users such as passengers. A station affairs device for staff members equipped with a function to prevent unauthorized reference of personal information that provides various services to the user by the operation of, and a host device connected to the station affairs device for staff members so as to be able to communicate with each other via a communication line. A display means for displaying the items necessary for operation on the display screen of the staff station affairs equipment having a function for preventing unauthorized reference of personal information of the staff station affairs equipment system. An operation display unit having an input means capable of inputting a business button, a screen switching button, or a print button displayed on the display screen from a touch panel arranged on the display screen, and a communication means for communicating with the higher-level device. A control unit connected to the operation display unit and controlling the control unit and a storage unit managed by the control unit are provided, and the control unit acquires the number of certified personnel for each business from the higher-level device. Based on the separate staff certified number acquisition means and the business-specific staff certified number acquired by the business-specific staff certified number acquisition means, the staff information setting means for setting the staff information in the storage unit, and the staff display the operation. When the screen switching button displayed on the department is pressed and the screen is switched to the personal information display screen that includes the user's personal information by satisfying the prescribed requirements, the staff member is informed to the user that the personal information will be confirmed. The predetermined requirement includes a notification means for notifying, and when the number of persons to be authenticated based on the number of persons to be authenticated for each business is a plurality of persons, the member information set in the storage unit based on the person information setting means is included. The staff number difference confirmation means for confirming whether the staff numbers are different is provided, and the staff number is required to be different as a result of the confirmation by the staff number difference confirmation means. Station affairs for staff equipped with a personal information unauthorized reference prevention function, which is characterized in that a transmission request for the number of authenticated persons is transmitted to the higher-level device, the number of persons certified for each business is received from the higher-level device, and the number is stored in the storage unit. machine.

The schematic block diagram of the station affairs equipment system which concerns on Example 1. FIG. FIG. 6 is a schematic configuration diagram of an operation display unit / control unit 10 constituting the station service equipment for staff according to the first embodiment. An example of the number of certified staff by business according to the first embodiment. The flowchart of the station affairs equipment for clerk and the station affairs equipment system for clerk provided with the personal information fraudulent reference prevention function which concerns on Example 1.

In this embodiment, the operation of the staff station affairs equipment and the staff station affairs equipment system having the personal information fraud prevention function according to the present embodiment will be described below with reference to the drawings.

FIG. 1 is an example of a schematic configuration diagram of the station affairs equipment system 100 according to the first embodiment. The station affairs equipment system 100 is an example of a relatively small system, in which a staff station affairs equipment 1, a ticket gate 2 as an entrance machine, a ticket gate 3 as an entry machine, and a host device 4 are connected to each other via LAN5. It shows the case where it was done. Normally, the host device 4 is often connected to the center device 7 via a communication line 6 to form a configuration, but since this part is not the gist of the present invention, it is displayed as a broken line and its description is omitted.

The station affairs equipment 1 for staff includes an operation display unit / control unit 10, a magnetic card processing unit 20, a magnetic ticket issuing unit 30, a ticket issuing unit 40, a mobile tray unit 50, a customer display unit 60, and a voice guidance unit 61. , A journal printer unit 70, a staff card reader 80, an automatic change machine 90 as an automatic deposit / withdrawal device, a power supply control unit (not shown), and the like.

The operation display unit / control unit 10 includes an operation display unit 11 and a control unit 12, and can communicate with each unit constituting the staff station service equipment 1, and the entire staff station service equipment 1 can be communicated with. To control. Details will be described later.

The magnetic card processing unit 20 is configured to include an insertion / return unit, a magnetic processing unit, a printing unit, a punching unit, and the like (not shown), and processes a magnetic ticket.

The insertion / return section inserts and returns magnetic cards, magnetic commuter passes, Edmondson tickets (ordinary tickets, coupon tickets), and large tickets.

The magnetic processing unit reads and writes magnetic information on magnetic cards, magnetic commuter passes, large tickets, and Edmondson tickets.

The printing unit does not print on magnetic commuter passes, but prints on the front side of large tickets and Edmondson tickets, and prints on the front and back sides of magnetic cards.

The punch section does not punch the magnetic commuter pass, but punches the magnetic card at a position that matches the amount of money. In addition, an admission punch will be given for Edmondson tickets and large tickets.

The magnetic ticket issuing unit 30 writes and reads magnetic encoding information, commuter ticket magnetic information, and name magnetic information on a magnetic ticket (magnetic commuter pass, large ticket, Edmondson ticket).

The ticket issuing unit 40 includes a control unit, a processing mechanism unit, a power supply unit, and the like.

The control unit controls the ticket issuing unit 40 and communicates with the operation display unit / control unit 10.

The processing mechanism unit includes an insertion / returning unit, a hopper unit, a wireless R / W unit, a printing processing unit, and the like.

The insertion / return unit inserts and returns the IC card.

The hopper unit is removable by storing a plurality of IC cards (for example, 100 cards) in a cassette provided inside.

The wireless R / W unit reads and writes the IC card.

The print processing unit prints the IC commuter pass, the ICFS card (registered type), and the old card (rewrite). Printing and erasing are performed with a thermal head.

The mobile tray unit 50 includes a control unit, a wireless R / W (Read Write) unit, an antenna surface display unit, a power supply unit, and the like, and is easy to move because it is small and lightweight. This is the reason why it is called the mobile tray section. In this embodiment, the mobile tray unit 50 is installed at a ticket counter at a station, and when an IC ticket possessed by a user such as a passenger is held over the antenna surface display unit, the IC ticket is read and written. Do. In addition, it communicates with the operation display unit / control unit 10 described above. Details will be described later.

The customer display unit (notification means) 60 displays the same wording as the voice guidance to the user when the staff member is referencing (displaying) or printing the voice information, and the staff member displays the personal information. This is to notify that the reference or printing is performed. In addition, information requested by the user, such as the amount received, the amount returned, and the balance of the card, is displayed.

The voice guidance unit (notification means) 61 provides voice guidance to the user when the staff member is referencing (displaying) or printing the voice information. This is to notify that the staff member is referring to or printing personal information.

The journal printer unit (receipt printer) 70 prints out business-specific data, deadline data, and the like on recording paper according to a predetermined format.

The clerk card reading device 80 is a reading device that is connected to the control unit 12 of the operation display unit / control unit 10 via USB and reads the clerk card carried by the clerk.

The automatic change machine 90 includes an automatic coin change machine 91, an automatic banknote change machine 92, and a coin tray 93.

The automatic change machine 90 consists of 6 domestically issued coins (1 yen, 5 yen, 10 yen, 50 yen, 100 yen, 500 yen) and 4 types of Bank of Japan notes (1000 yen (including old bills), 2000 yen, Handles 5,000 yen (including old bills) and 10,000 yen (including old bills). Change is released and deposits and withdrawals are made in conjunction with the ticket counter processing machine (corresponding to the station affairs equipment 1 for staff in this embodiment).

The automatic coin change machine 91 has a coin insertion slot 912, and by inserting change reserves and receipts from the coin insertion slot 912, coins are conveyed inside and a coefficient is performed. In addition, coins are paid out from the coin storage. The amount of money deposited and paid out is coefficiented, and the amount of money in the change machine is managed by the coin change machine alone. The managed amount can be notified to the operation display unit / control unit 10.

The automatic banknote change machine 92 has a banknote entrance, and by inserting banknotes for change reserves and receipts from the slot, the banknotes are conveyed to the inside and a coefficient is performed. In addition, the bills are paid out from the bill storage section. The amount of deposits and withdrawals is counted, and the amount of money in the change machine is managed by the banknote change machine alone. The managed amount can be notified to the operation display unit / control unit 10.

The coin tray 93 is a manual coin tray. Each coin can be stored in the tray. When the money entrusted by the user cannot be recognized by the automatic coin change machine, the coins stored in this tray can be used as a substitute.

FIG. 2 is a schematic configuration diagram of an operation display unit / control unit 10 constituting the staff station service equipment 1 according to the first embodiment. As described above, the operation display unit / control unit 10 includes an operation display unit 11 and a control unit 12.

The operation display unit 11 is composed of a display means having a color LCD 11a for displaying items necessary for operation, a numeric keypad (synonymous with display) arranged on the color LCD 11a, a business button, a screen switching button, a print button, and the like. It has an input means, and is configured to have a touch panel 11b that can input by pressing these ten keys, business buttons, screen switching buttons, print buttons, and the like with a finger.

The control unit 12 is configured by connecting a CPU 12a, a memory 12b, a storage unit 12c (magnetic disk (HDD)), a keyboard 13, a mouse 14, and the like, and is connected to the serial interface 12d, the parallel interface 12e, or the LAN interface 12f. It controls each part that constitutes the station affairs equipment 1 for staff, and is connected to the host device 4 in a communicable manner.

FIG. 3 is an example of the number of certified staff members for each business according to the first embodiment. The number of certified staff members for each business is the number of certified staff members set in advance for each business, and is registered in the higher-level device 4.

When the power of the staff station equipment 1 is turned on, the control unit 12 of the staff station equipment 1 transmits a transmission request of "the number of certified staff by business" to the host device 4 in the initialization process. The host device 4 receives the transmission request of the "staff certified number by business" from the staff station equipment 1, and transmits the "staff certified number by business" to the staff station equipment 1 that made the transmission request. .. The staff station service equipment 1 stores the “business-specific staff-certified number of people” received from the host device 4 in the storage unit 12c managed by the control unit 12 (business-specific staff-certified number acquisition means). The illustrated number of certified staff members for each business is an information value stored in the storage unit 12c (synonymous with storage) in this way.

The number of certified staff for each job is individually set for n jobs as follows.

0: No personal information displayed 1: No consent required for multiple people (set when there is only one person in charge at the station at any given time)
2: Two-person consent required FIG. 4 is a flowchart of a staff station service equipment and a staff station service system having a function for preventing unauthorized reference to personal information according to the first embodiment.

In step S01, the control unit 12 of the staff station affairs equipment 1 acquires the number of staff certified by business. The acquisition method is the same as that shown in the explanation of FIG. 3, but is shown below.

When the power of the staff station equipment 1 is turned on, the control unit 12 of the staff station equipment 1 transmits a transmission request of "the number of certified staff by business" to the host device 4 in the initialization process. The host device 4 receives the transmission request of the "staff certified number by business" from the staff station equipment 1, and transmits the "staff certified number by business" to the staff station equipment 1 that made the transmission request. .. The staff station service equipment 1 stores the “number of staff certified by business” received from the host device 4 in the storage unit 12c managed by the control unit 12. In this way, the illustrated number of certified staff members for each business is stored in the storage unit 12c (synonymous with storage).

In step S02, the control unit 12 displays a business selection screen on the operation display unit 11 and causes a staff member to select a business.

In step S03, the control unit 12 uses the business number of the business selected by the staff as a key to obtain the number of certified people from the number of certified staff for each business.

In step S04, each part constituting the station affairs equipment for staff is operated and information necessary for business is input.

In step S05, the control unit 12 confirms whether the screen switching button on the operation screen has been pressed. As a result of this confirmation, when the screen switching button is pressed (Yes in S05), it is confirmed whether the personal information is displayed on the switching screen by pressing the screen switching button (S06). If the screen switching button is not pressed in step S05 (No in S05), the process proceeds to step S19.

If the personal information is displayed as a result of the confirmation in step S06 (Yes in S06), the process proceeds to step S07. If the personal information is not displayed (No in S06), the process proceeds to step S18.

In step S07, the control unit 12 confirms whether a plurality of persons have been authenticated. That is, it is confirmed whether the number of certified staff members for each business is 2 (two consent required: see FIG. 3) and the two staff members have been certified. Specifically, it is confirmed whether the multi-person authentication flag set in step S30 described later is set (= 1). If the multi-person authentication flag is set, multi-person authentication has been authenticated. As a result of the confirmation in step S07, if a plurality of persons have not been authenticated (No in S07), the process proceeds to step S08.

In step S08, it is confirmed whether the number of authenticated persons is two. As a result of this confirmation, when the number of authenticated persons is two (two persons in S08), the process proceeds to step S09.

In step S09, it is confirmed whether the information of the first person in charge has been entered. As a result of this confirmation, when the first person's staff information has not been input (No in S09), the patient waits until the first person's staff information is input (S09LOOP). If the first person's staff information has already been input as a result of the confirmation in step S009 (Yes in S09), the first person's staff information is stored in the storage unit 12c (S10, staff information setting means).

In step S11, it is confirmed whether the information of the second person in charge has been input. As a result of this confirmation, when the second person's staff information has not been input (No in S11), it waits until the second person's staff information is input (S11LOOP). If the second person's staff information has already been input as a result of the confirmation in step S011 (Yes in S11), the second person's staff information is stored in the storage unit 12c (S12, staff information setting means).

In step S13, it is confirmed whether the staff numbers (IDs) of the first and second staff information are different. As a result of this confirmation, if they are the same (same as in S13), the process proceeds to step S14.

In step S14, the control unit 12 displays the message "Screen switching is not possible" in the staff operation guidance display area of the operation display unit 11, and proceeds to step S09. The purpose is to notify the staff of the fact that multiple person authentication is required to display personal information by the business.

In step S13, it is confirmed whether the staff numbers (IDs) of the first and second staff information are different or the same (S13, staff number difference confirmation means). As a result of this confirmation, if they are different (different in S13), since the multi-person authentication is confirmed, the multi-person authentication flag = 1 (two-person authentication) is set (S15), and the process proceeds to step S16.

In step S16, the control unit 12 outputs the phrase "a staff member is confirming personal information" to the voice guidance unit (notification means) 61 (S16), and further, the customer display unit (notification means) 60. "The staff is confirming the personal information" is displayed (S17), and the process proceeds to step S18.

In step S18, the control unit 12 switches the screen display. If the personal information is not displayed in step S06 (No in step S06), there is no problem even if the screen display is switched as it is. In addition, when the multiple person authenticated flag is set (= 1) in step S15, voice guidance is given to the user in step S16 and step S17 to the effect that the staff member is confirming the personal information. After the operation is performed by the unit 61 and the customer display unit 60, the screen display is switched to display the personal information (S18), and the process proceeds to step S04.

In step S19, it is confirmed whether the print button is pressed. If the print button is pressed as a result of this confirmation, the process proceeds to step S20.

In step S20, the control unit 12 confirms whether the personal information will be printed when the print button is pressed. If the personal information is not printed as a result of the confirmation (No in S20), the printing process according to the selected business specification is performed (S21), and the process proceeds to step S04. If the personal information is printed in step S20 (Yes in S20), the process proceeds to step s22.

In step S22, the control unit 12 confirms whether a plurality of persons have been authenticated. That is, it is confirmed whether the number of certified staff members for each business is 2 (two consent required: see FIG. 3) and the two staff members have been certified. As a result of the confirmation in step S22, if a plurality of persons have not been authenticated (No in S22), the process proceeds to step S23.

In step S23, it is confirmed whether the number of authenticated persons is two. As a result of this confirmation, when the number of authenticated persons is two (two persons in S23), the process proceeds to step S24.

In step S24, it is confirmed whether the information of the first person in charge has been input. As a result of this confirmation, when the first person's staff information has not been input (No in S09), the patient waits until the first person's staff information is input (S24LOOP). As a result of the confirmation in step S009, if the first person's staff information has already been input (Yes in S09), the first person's staff information is stored in the storage unit 12c (S25), and the process proceeds to step S26.

In step S26, it is confirmed whether the information of the second person in charge has been input. As a result of this confirmation, when the second person's staff information has not been input (No in S26), it waits until the second person's staff information is input (S26LOOP). As a result of the confirmation in step S026, if the second person's staff information has already been input (Yes in S26), the second person's staff information is stored in the storage unit 12c (S27), and the process proceeds to step S28.

In step S28, it is confirmed whether the clerk numbers (IDs) of the first and second clerk information are different or the same (staff number difference confirmation means). As a result of this confirmation, if they are the same (same as in S28), the process proceeds to step S29.

In step S29, the control unit 12 displays a message "printing is not possible" in the staff operation guidance display area of the operation display unit 11, proceeds to step S04, and continues the subsequent processing. The purpose is to notify the staff of the fact that multiple person authentication is required for printing personal information by the business.

In step S28, when the clerk numbers (IDs) of the first and second clerk information are different (different in S28), the multi-person authentication is confirmed, so the multi-person authentication flag = 1 (two-person authentication) is set. Then, the process proceeds to step S31.

In step S31, the control unit 12 outputs the words "The staff is printing personal information. Please receive it." To the voice guidance unit (notification means) 61, and further, the customer display unit (notification means). At 60, the message "The staff is printing personal information. Please receive it." Is displayed (S32), and the process proceeds to step S21.

As described above, according to this embodiment, when displaying the name, age, telephone number, date of birth, etc. of highly secure personal information, or when printing the personal information, each business Multiple persons registered in the above are required to authenticate multiple persons, and when displaying or printing the personal information, the user is notified by voice guidance and display to prevent unauthorized reference of personal information. It is possible to provide a station affairs equipment for staff and a station affairs equipment system for staff with functions.

1 Station affairs equipment for staff 2 Ticket gates (entrance machines)
3 Ticket gate (participation machine)
4 Upper device 5 LAN
10 Operation display unit / Control unit 11 Operation display unit 12 Control unit 12c Storage unit 13 Keyboard 14 Mouse 20 Magnetic card processing unit 30 Magnetic ticket issuing unit 40 Ticket issuing unit 50 Mobile tray unit 60 Customer display unit 61 Voice guidance unit 70 Journal printer unit 80 Staff card reader 90 Automatic change machine 91 Automatic coin change machine 92 Automatic bill change machine

Claims (6)

Station service equipment for staff members, which is installed at the station window and has a function to prevent unauthorized reference of personal information, which provides various services to the user by the operation of the staff member in response to a request from a user such as a passenger, and the station for the staff member. It is a station clerk's station affairs equipment equipped with a personal information unauthorized reference prevention function of the clerk's station affairs equipment system configured by having a higher-level device that is communicably connected to the office equipment via a communication line.
A display means for displaying items necessary for operation on the display screen, and a business button, screen switching button, or print button displayed on the display screen can be input to the staff from a touch panel arranged on the display screen. An operation display unit having an input means and
A communication means that communicates with the host device, a control unit that is connected to the operation display unit and controls them, and a control unit that controls them.
The storage unit managed by this control unit and
With
The control unit
A means for acquiring the number of certified staff for each business and a means for acquiring the number of certified staff for each business from the higher-level device.
Based on the number of certified staff by business acquired by the certified number of staff by business, the staff information setting means for setting the staff information of the staff in the storage unit, and the staff information setting means.
When the staff member presses the screen switching button displayed on the operation display unit and switches to the personal information display screen containing the user's personal information by satisfying the predetermined requirements, the staff member confirms the personal information. Notification means to notify the user to that effect,
With
The above-mentioned predetermined requirements
When the number of authenticated persons based on the number of persons authenticated for each job is a plurality of persons, the person-in-charge information setting means is provided with means for confirming the difference in person-numbered persons in the person-in-charge information set in the storage unit. ,
As a result of confirmation by the above-mentioned staff number difference confirmation means, it is required that the staff number is different.
The means for acquiring the number of certified staff by business is
A transmission request for the number of certified personnel by business is transmitted to the higher-level device, and the transmission request is performed.
A station affairs device for clerk having a function of preventing unauthorized reference of personal information, which is characterized by receiving the number of certified clerk by business from the higher-level device and storing it in the storage unit. When the screen switching button is pressed, as a result of confirmation by the staff number difference confirmation means, if the staff numbers are the same, a request to display a message to the effect that the screen cannot be switched in the staff guidance display area of the operation display unit. Station affairs equipment for staff members equipped with the personal information unauthorized reference prevention function described in item 1. The notification means further
When the clerk presses the print button displayed on the operation display unit and the user's personal information is printed by satisfying the predetermined requirements, the clerk prints the personal information and prompts the receipt. The personal information fraudulent reference prevention function according to claim 2 is provided, and the personal information fraudulent reference prevention function according to claim 1 is provided. Claim 2 that displays a message to the effect that printing is not possible in the staff guidance display area of the operation display unit when the staff numbers are the same as a result of confirmation by the staff number difference confirmation means when the print button is pressed. Or, station affairs equipment for staff members equipped with the function to prevent unauthorized reference of personal information described in 3 after the claims. The notification means is
A voice guidance unit for notifying users by voice,
A customer display unit for notifying users by display,
With
The staff station affairs device having the personal information unauthorized reference prevention function according to claim 1 or 3, wherein the wording is displayed on the customer display unit in the same manner as the voice guidance by the voice guidance unit. Station service equipment for staff members, which is installed at the station window and has a function to prevent unauthorized reference of personal information, which provides various services to the user by the operation of the staff member in response to a request from a user such as a passenger, and the station for the staff member. It is a station service equipment system for staff members that is configured to have a higher-level device that is connected to the office equipment so that it can communicate via a communication line.
The station affairs equipment for staff members equipped with the personal information unauthorized reference prevention function
A display means for displaying items necessary for operation on the display screen, and a business button, screen switching button, or print button displayed on the display screen can be input to the staff from a touch panel arranged on the display screen. An operation display unit having an input means and
A communication means that communicates with the host device, a control unit that is connected to the operation display unit and controls them, and a control unit that controls them.
The storage unit managed by this control unit and
With
The control unit
A means for acquiring the number of certified staff for each business and a means for acquiring the number of certified staff for each business from the higher-level device.
Based on the number of certified staff by business acquired by the certified number of staff by business, the staff information setting means for setting the staff information of the staff in the storage unit, and the staff information setting means.
When the clerk presses the screen switching button displayed on the operation display unit and switches to the personal information display screen containing the user's personal information by satisfying the predetermined requirements, the clerk confirms the personal information or Notification means to notify the user to print and
With
The above-mentioned predetermined requirements
When the number of authenticated persons based on the number of persons authenticated for each job is a plurality of persons, the person-in-charge information setting means is provided with means for confirming the difference in person-numbered persons in the person-in-charge information set in the storage unit. ,
As a result of confirmation by the above-mentioned staff number difference confirmation means, it is required that the staff number is different.
The means for acquiring the number of certified staff by business is
A transmission request for the number of certified personnel by business is transmitted to the higher-level device, and the transmission request is performed.
The number of certified personnel for each business is received from the higher-level device and stored in the storage unit.
The higher-level device is
Receive a transmission request for the number of certified staff by business from the station service equipment 1 for staff,
A staff station affairs equipment system characterized in that the number of staff certified by business is transmitted to the staff station affairs equipment that has made a transmission request.

Images