JP6911342B2 - Information processing equipment and programs - Google Patents

Description

The present invention relates to an information processing device and a program.

Conventionally, a device for managing highly confidential information (confidential information) represented by, for example, My Number (registered trademark) has been widely used (see, for example, Patent Document 1).
Further, when displaying or printing confidential information on a screen, a log which is a usage history such as who, when, and what kind of operation is performed is recorded. As a result, in the unlikely event that a problem such as leakage of confidential information occurs, it is possible to identify the person involved in the problem by analyzing the log.

Japanese Unexamined Patent Publication No. 10-326213

However, such log recording is a technique that enables analysis after a problem is discovered, and it is not possible to sufficiently obtain the effect of preventing leakage of confidential information only by recording the log. For this reason, a more robust mechanism has been required to prevent the leakage of confidential information.

An object of the present invention is to increase the robustness of preventing leakage of confidential information.

In order to solve the above problems, the information processing device according to the present invention is an information processing device capable of displaying or printing a predetermined form, and the number of times the personal number can be used on the predetermined form is seasonal. The storage means stored in association with the time and the number of times the personal number is displayed and used in the personal number entry field in the predetermined form , and the display use date corresponds to the predetermined seasonal time. The number of times the display has been used in the fiscal year, or the number of times the personal number has been printed in the personal number entry field in the predetermined form , and the printing use date corresponds to the predetermined seasonal period. count, counting means for counting as a count value, when the current date and time non-corresponding to the predetermined seasonal period, and, the predetermined seasonal in the storage means and counted the count value by said counting means If the count value by comparing the available number of times stored in association with such timing has reached the available number of times, the display use or printing using the personal number to the personal number entry fields e Bei a use restriction means for inhibiting, wherein the counting means counts for each year corresponding said count value to the current date, the use restriction means corresponds to the year for each year corresponding to the current date and time It is characterized in that the display use or printing use of the personal number is prohibited based on the count value.
Further, in the program according to the present invention, the computer of the information processing apparatus capable of displaying or printing a predetermined form is the number of times the personal number is displayed and used in the personal number entry field in the predetermined form , and the display use date is set. The number of times the display has been used in the current year corresponding to the predetermined seasonal time, or the number of times the personal number has been printed in the personal number entry field in the predetermined form , and the print use date is the predetermined seasonal period. counting means for counting printed using the number in the year corresponding to the time, as the count value, and the current when time is not applicable to the given seasonal period, and the count value counted by said counting means If the count value is compared with a usable count of the personal number stored in advance in the storage means in association with the predetermined seasonal time it has reached the possible number of uses, to the personal number entry fields The personal number is made to function as a usage restriction means for prohibiting the display use or printing use of the personal number, the counting means counts the count value for each year corresponding to the current date and time, and the usage restriction means is at the current date and time. It is characterized in that the display use or printing use of the personal number is prohibited for each applicable year based on the count value corresponding to the relevant year.

According to the present invention, the robustness of preventing leakage of confidential information can be enhanced.

It is a block diagram which shows the main control configuration of each apparatus which constitutes the personal number management system which concerns on this embodiment. It is a figure which shows an example of the login user management table. It is a figure which shows an example of the authority management table. It is a figure which shows an example of the form layout management table. It is a figure which shows an example of an employee management table. It is a figure which shows an example of an individual number management table. It is a figure which shows an example of the display / print count management table. It is a figure which shows an example of the history table. It is a flowchart which shows the personal number registration process. It is a figure which shows an example of the personal number registration screen. It is a flowchart which shows the personal number display process. It is a figure which shows an example of a display error screen. It is a figure which shows an example of the personal number display screen. It is a flowchart which shows the personal number printing process. It is a figure which shows an example of a print error screen. It is a figure which shows an example of a print error screen. It is a figure which shows an example of a printed form.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The present invention is not limited to the illustrated examples.

[1. Configuration description]
First, the configuration of the personal number management system 100 according to the present embodiment will be described.
FIG. 1 is a block diagram showing a main control configuration of each device constituting the personal number management system 100.
As shown in FIG. 1, the personal number management system 100 includes a client terminal 1, a personal number management server 3, and a printing device 5.
In the personal number management system 100, the client terminal 1, the personal number management server 3, and the printing device 5 are connected to each other so as to be able to communicate with each other by the communication network N. The communication network N is a communication network including a wired LAN (Local Area Network), a wireless LAN, a mobile communication network, the Internet, and the like.
In the present embodiment, the client terminal 1, the personal number management server 3, and the printing device 5 cooperate with each other to function as the information processing device of the present invention.

The client terminal 1 is an information device such as a PC (personal computer), a tablet terminal, a smartphone, or a mobile phone. The client terminal 1 is configured to be composed of one unit, but the present invention is not limited to this, and the client terminal 1 may be composed of a plurality of devices.

As shown in FIG. 1, the client terminal 1 includes a control unit 11, an operation unit 12, a display unit 13, a communication unit 14, and a storage unit 15.

The control unit 11 centrally controls the operation of the client terminal 1. Specifically, the control unit 11 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like, and is a ROM and a storage unit 15 developed in a work area of the RAM. By cooperating with the program data stored in the CPU and the CPU, each part of the client terminal 1 is controlled in an integrated manner.

The operation unit 12 includes a keyboard having a character input key, a number input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, and receives an operation input from a user and responds to the operation input. The operation signal is output to the control unit 11.

The display unit 13 includes a display such as an LCD (Liquid Crystal Display), and displays an image based on the display control signal output from the control unit 11 on the display screen.

The communication unit 14 is a communication interface having a communication IC (Integrated Circuit), a communication connector, and the like, and under the control of the control unit 11, data communication is performed via a communication network N using a predetermined communication protocol.

The storage unit 15 is composed of an HDD (Hard Disk Drive), a semiconductor memory, and the like, and stores data such as program data and various setting data in a readable and writable manner from the control unit 11.

The personal number management server 3 is a computer system owned by a company, and is a device that manages personal number information including personal numbers (my number (registered trademark)) of employees and their families.
The personal number is a unique number given to all people who have a resident card in Japan by the personal number system that efficiently manages the personal information of the people.

The personal number management server 3 is composed of one or a plurality of servers deployed on the communication network N. In the present embodiment, it is assumed that it is composed of one management server, but it may be composed of a plurality of server groups such as a WEB server, a DB server, and a storage server.

As shown in FIG. 1, the personal number management server 3 includes a counting means, a usage limiting means, a storage control means, a control unit 31 as a second memory control means, an operation unit 32, a display unit 33, and a communication unit 34. And a storage unit 35 as a storage means, a registration means, and a second registration means.

The control unit 31 centrally controls the operation of the personal number management server 3. Specifically, the control unit 31 is configured to include a CPU, a ROM, a RAM, and the like, and is an individual by cooperating with the CPU and the program data stored in the ROM or the storage unit 35 developed in the work area of the RAM. It controls each part of the number management server 3 in an integrated manner.

The operation unit 32 includes a keyboard having a character input key, a number input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, and receives an operation input from a user and responds to the operation input. The operation signal is output to the control unit 31.
The display unit 33 includes a display such as an LCD, and displays an image based on the display control signal output from the control unit 31 on the display screen.

The communication unit 34 is a communication interface having a communication IC, a communication connector, and the like, and under the control of the control unit 31, data communication is performed via the communication network N using a predetermined communication protocol.

The storage unit 35 is composed of an HDD, a semiconductor memory, and the like, and stores data such as program data and various setting data in a readable and writable manner from the control unit 31.
For example, the storage unit 35 stores the login user management table T1, the authority management table T2, the form layout management table T3, the employee management table T4, the personal number management table T5, the display / print count management table T6, the history table T7, and the like. ..

FIG. 2 is a diagram showing an example of the login user management table T1.
The login user management table T1 is a table that manages users who can log in to the personal number management system 100. The data of the login user management table T1 is registered in advance when the personal number management system 100 is operated.

As shown in FIG. 2, the login user management table T1 has fields of "login ID" T11, "login password" T12, and "authority ID" T13.
The "login ID" T11 is an ID used when logging in.
The "login password" T12 is a password used when logging in with the ID of the "login ID" T11.
The "authority ID" T13 is an ID for setting an authority for the ID of the "login ID" T11, and is associated with the authority management table T2 of FIG. 3 to execute the ID of the "login ID" T11. The range of possible operations is set.

FIG. 3 is a diagram showing an example of the authority management table T2.
The authority management table T2 is a table for setting an authority pattern for performing processing related to an individual number. The data of the authority management table T2 is registered in advance when the personal number management system 100 is operated.

As shown in FIG. 3, the authority management table T2 has fields of "authority ID" T21, "individual number registration" T22, "individual number display" T23, "individual number printing" T24, and "number of times changeable" T25. ..
The "authority ID" T21 is an ID for specifying the type of authority.
The "individual number registration" T22 is a field for setting whether to allow or prohibit the registration of the individual number for the ID of the "authority ID" T21.
The "personal number display" T23 is a field for setting whether to allow or prohibit the display of the personal number for the ID of the "authority ID" T21.
The "personal number printing" T24 is a field for setting whether to allow or prohibit printing of the personal number for the ID of the "authority ID" T21.
The "number of times changeable" T25 is a field for setting whether to allow or prohibit the change of the personal number display count and the personal number print count for the ID of the "authority ID" T21.

FIG. 4 is a diagram showing an example of the form layout management table T3.
The form layout management table T3 is a table that manages the layout for creating a form. The data of the form layout management table T3 is registered in advance when the personal number management system 100 is operated.

As shown in FIG. 4, the form layout management table T3 has fields of "form ID" T31, "form name" T32, "createable period" T33, and "layout data" T34.
The "form ID" T31 is a field for setting an ID for specifying the type of form.
The "form name" T32 is a field for setting a name for specifying the form.
The "createable period" T33 is a field for setting a period during which a form can be created.
The “layout data” T34 is a field for setting binary data that defines a format at the time of creating a form.

FIG. 5 is a diagram showing an example of the employee management table T4.
The employee management table T4 is a table for managing the names of employees.
As shown in FIG. 5, the employee management table T4 has fields of "employee ID" T41 and "employee name" T42.
The "employee ID" T41 is a field for setting an ID for identifying an employee registered by the personal number registration process (described later).
The "employee name" T42 is a field for setting the name of the employee corresponding to the ID of the "employee ID" T41.

FIG. 6 is a diagram showing an example of the personal number management table T5.
The personal number management table T5 is a table for managing the personal numbers of employees.
As shown in FIG. 6, the personal number management table T5 has fields of "employee ID" T51 and "personal number" T52.
The "employee ID" T51 is a field for setting an ID for identifying an employee registered by the personal number registration process (described later).
The "individual number" T52 is a field for setting the individual number of the employee corresponding to the ID of the "employee ID" T51.

FIG. 7 is a diagram showing an example of the display / print count management table T6.
The display / print count management table T6 is a table that manages the displayable count and the printable count of the personal number.
As shown in FIG. 7, the display / print count management table T6 has fields of "employee ID" T61, "operation type" T62, "period" T63, "form ID" T64, and "number of times" T65.
The "employee ID" T61 is a field for setting an ID for identifying an employee registered by the personal number registration process (described later).
The "operation type" T62 is a field for setting the type (display or print) of the operation registered by the personal number registration process (described later).
The "period" T63 is a field for setting the displayable period registered by the personal number registration process (described later) or the createable period set in the form layout management table T3 of FIG.
The "form ID" T64 is a form ID corresponding to a form in which the number of prints is registered by the personal number registration process (described later).
The "number of times" T65 is a field for setting the number of times that can be displayed or the number of times that can be printed registered by the personal number registration process (described later).
In this case, if the "number of times" T65 is set to "display" in the "operation type" T62 in association with the employee ID, each displayable period or each createable period set in the "period" T63. The number of times that can be displayed is set in.
Further, in the "number of times" T65, when "print" is set in the "operation type" T62 in association with the employee ID, the printable number of times is set for each form ID set in the "form ID" T64. NS.
The "number of times" T65 may be set to the number of times that can be displayed or the number of times that can be printed for each purpose of using the personal number.
That is, when the individual number is used for multiple purposes such as "output of withholding tax slip" and "output of dependent deduction report", the number of times the individual number can be displayed or the number of times the individual number can be printed is calculated for each purpose. It may be set.
Further, the "number of times" T65 may be set to the number of times that can be displayed or the number of times that can be printed for each device that uses the personal number.
That is, when the personal number management system 100 is configured to include a plurality of client terminals 1, the number of times the personal number can be displayed or the number of times the personal number can be printed may be set for each client terminal.

FIG. 8 is a diagram showing an example of the history table T7.
The history table T7 is a table that manages the history of displaying and printing the personal number, and records the history of displaying and printing the personal number as a record. Therefore, the history table T7 has 0 records in the initial state, but records are added as the personal number is displayed or printed.

As shown in FIG. 8, the history table T7 has fields of "serial number" T71, "login ID" T72, "employee ID" T73, "implementation date" T74, "operation type" T75, and "form ID" T76. Have.
The “serial number” T71 is a serial number assigned in the order in which records are added to the history table T7.
The "login ID" T72 is an ID used for login when the personal number is displayed or printed.
The "employee ID" T73 is an ID of an employee whose personal number is displayed or printed.
"Implementation date" T74 is a date on which the personal number is displayed or printed.
"Operation type" T75 is a type (display or print) in which the personal number is operated.
The "form ID" T76 is an ID indicating the type of the printed form when the personal number is printed.

Returning to FIG. 1, the printing apparatus 5 is composed of, for example, an inkjet printer, a laser printer, or the like. As shown in FIG. 1, the printing device 5 includes a control unit 51 and a communication unit 52, and under the control of the control unit 51, prints out according to the processing content performed by the personal number management server 3.

The control unit 51 centrally controls the operation of the printing device 5. Specifically, the control unit 51 is configured to include a CPU, ROM, RAM, etc. (not shown), and the ROM developed in the work area of the RAM or the program data stored in the storage unit (not shown) collaborates with the CPU. Controls each part of the printing device 5 in an integrated manner.

The communication unit 52 is a communication interface having a communication IC, a communication connector, and the like, and under the control of the control unit 51, performs data communication via the communication network N using a predetermined communication protocol.

[2. Description of operation]
Next, the operation of the personal number management system 100 according to the present embodiment will be described.

<Individual number registration process>
First, a process of registering an individual number in the individual number management server 3 using the client terminal 1 (individual number registration process) will be described with reference to the flowchart of FIG.
In this process, the control unit 11 of the client terminal 1 accepts the input of login information (login ID, login password, etc.) required for accessing (login) the personal number management server 3, and receives the input login information. , Is started by transmitting to the personal number management server 3 via the communication unit 14.

First, the control unit 31 of the personal number management server 3 receives the login information transmitted from the client terminal 1 via the communication unit 34 (step S101).

Next, the control unit 31 refers to the login user management table T1 (FIG. 2) and determines whether or not the received login information is registered in the personal number management server 3 (step S102).

Then, when it is determined that the login information is not registered in the personal number management server 3 (step S102: NO), the control unit 31 ends this process.

On the other hand, when it is determined that the login information is registered in the personal number management server 3 (step S102: YES), the control unit 31 refers to the authority management table T2 (FIG. 3), and the login included in the login information. It is determined whether or not the ID has the authority to register the personal number (step S103).

When the control unit 31 determines that the login ID included in the login information does not have the authority to register the personal number (step S103: NO), the control unit 31 ends this process.

On the other hand, when it is determined that the login ID included in the login information has the authority to register the personal number (step S103: YES), the control unit 31 displays the screen for registering the personal number (personal number registration screen). Screen information is generated and transmitted to the client terminal 1 via the communication unit 34 (step S104).

As a result, the control unit 11 of the client terminal 1 causes the display unit 13 to display the personal number registration screen based on the screen information transmitted from the personal number management server 3.

FIG. 10 is a diagram showing an example of the personal number registration screen G1.
As shown in FIG. 10, the personal number registration screen G1 includes an employee ID input field G11, a name input field G12, an individual number input field G13, a displayable number setting field G14, and a printable number setting field G15. It has an execution button (not shown), and the like.

In the employee ID input field G11, the name input field G12, and the personal number input field G13, the employee ID, the name of the employee, and the personal number of the employee are input, respectively.

Further, the displayable number of times setting column G14 has a period setting column G141 and a number of times setting column G142.
In the period setting field G141, an arbitrary period in which the personal number can be displayed is input. In the number-of-times setting field G142, an arbitrary number of times that the personal number can be displayed is input.
In the displayable number of times setting field G14, when the number of times data is input in the number of times setting field G142 without inputting the period data in the period setting field G141, the number of times the individual number can be displayed regardless of the period. Is set.
That is, in this case, the number of times that the personal number can be displayed is set for each employee ID.

The printable number of times setting field G15 has a form name field G151 and a number of times setting field G152.
In the number-of-times setting field G152, an arbitrary number of times that the personal number can be printed is input for each type of form.
If the number of times data is entered in the number of times setting field G152 without inputting the form name data in the form name field G151 in the printable number of times setting field G15, the personal number is printed regardless of the type of form. This means that the possible number of times has been set.
That is, in this case, the number of times that the personal number can be printed is set for each employee ID.

The personal number registration screen G1 accepts the input of registration information (employee ID, name, personal number, displayable period and number of times, printable number of times), and the control unit 11 of the client terminal 1 communicates the input registration information. It is transmitted to the personal number management server 3 via the unit 14.

Returning to FIG. 9, the control unit 31 of the personal number management server 3 determines whether or not the registration information has been received from the client terminal 1 via the communication unit 34 (step S105), and when the registration information is received (step S105). Step S105: YES), the employee ID and the employee name are added to the employee management table T4 (FIG. 5) based on the received registration information (step S106).

Next, the control unit 31 adds the employee ID and the personal number to the personal number management table T5 (FIG. 6) based on the received registration information (step S107).

Next, the control unit 31 displays the employee ID, operation type (display or print), period, form ID, displayable number of times, or printable number of times based on the received registration information in the display / print count management table T6 (FIG. 7). ) (Step S108), and this process is terminated.

By the above processing, when displaying the personal number, by designating the displayable period and the number of times that the personal number can be displayed in combination, it is possible to flexibly control even if there is a bias in the timing of performing the personal number business. In addition, when printing an individual number, by specifying the number of times that the individual number can be printed for each type of form, control can be performed according to the type of form.
Furthermore, when displaying the individual number, by setting the number of times the individual number can be displayed without setting the period, the number of times the individual number can be displayed can be set for each employee ID, and the number of times the individual number can be displayed for each employee ID can be set. Can be controlled.
In addition, when printing an individual number, by setting the number of times the individual number can be printed without setting the type of form, the number of times the individual number can be printed can be set for each employee ID, and the individual number can be printed for each employee ID. The number of times can be controlled.

A default value is input in the displayable number setting field G14 and the printable number setting field G15, and the user may arbitrarily change the value.
Regarding the setting of the period setting column G141, even if the year changes depending on the type of form, there is a high possibility that the season and time will not change. It may be automatically updated.

Further, by the above processing, the period registered in the display / print count management table T6 (FIG. 7), the displayable count, and the printable count are the privileges of the "number changeable" T25 in the authority management table T2 (FIG. 3). It is a configuration to log in with an account with and change each setting value from a special setting screen.
In addition, regarding changes in the period, the number of times that can be displayed, and the number of times that can be printed, there is a superior (superior officer) who will be in charge in addition to the person in charge of personal number registration business, and each business person in charge will change to this superior. It is preferable that these change processes are carried out only when there is a declaration of change in the period, the number of times that can be displayed, and the number of times that can be printed.
In addition, when the superior performs the above change processing, the information of the history table T7 (FIG. 8) is displayed on the screen so that information such as who, when, what operation, and how many times is performed can be confirmed. The change process can be implemented after judging the validity of the declaration from the person in charge of business.

<Personal number display processing>
Next, a process of accessing the personal number management server 3 from the client terminal 1 and displaying the personal number (personal number display process) will be described with reference to the flowchart of FIG.
In this process, the control unit 11 of the client terminal 1 accepts the input of login information (login ID, login password, etc.) required for accessing (login) the personal number management server 3, and receives the input login information. , Is started by transmitting to the personal number management server 3 via the communication unit 14.

First, the control unit 31 of the personal number management server 3 receives the login information transmitted from the client terminal 1 via the communication unit 34 (step S201).

Next, the control unit 31 refers to the login user management table T1 (FIG. 2) and determines whether or not the received login information is registered in the personal number management server 3 (step S202).

Then, when it is determined that the login information is not registered in the personal number management server 3 (step S202: NO), the control unit 31 ends this process.

On the other hand, when it is determined that the login information is registered in the personal number management server 3 (step S202: YES), the control unit 31 refers to the authority management table T2 (FIG. 3), and the login included in the login information. It is determined whether or not the ID has the authority to display the personal number (step S203).

When the control unit 31 determines that the login ID included in the login information does not have the authority to display the personal number (step S203: NO), the control unit 31 ends this process.

On the other hand, when it is determined that the login ID included in the login information has the authority to display the personal number (step S203: YES), the control unit 31 has screen information on the screen for selecting an employee (employee list screen). Is generated and transmitted to the client terminal 1 via the communication unit 34 (step S204).

As a result, the control unit 11 of the client terminal 1 causes the display unit 13 to display the employee list screen (not shown) based on the screen information transmitted from the personal number management server 3.
When an employee (for example, Employee A) is selected on the employee list screen, the control unit 11 of the client terminal 1 transfers the selected employee's name (employee A's name) via the communication unit 14. And sends it to the personal number management server 3.

Next, the control unit 31 determines whether or not the employee name has been received from the client terminal 1 via the communication unit 34 (step 205), and when the employee name is received (step S205: YES), the employee management table T4 With reference to (FIG. 5), the employee ID (ID of employee A) corresponding to the received name of the employee (name of employee A) is acquired (step S206).

Next, the control unit 31 refers to the display / print count management table T6 (FIG. 7), the value of the “employee ID” T61 is the ID of the employee A, the “operation type” T62 is the display, and the “period”. It is determined whether or not there is a data row including the date of today (the date of processing) in the period specified in T63 (step S207).

Then, when it is determined that there is no data row that matches the above conditions (step S207: NO), the control unit 31 ends this process.
On the other hand, when there is a data row that matches the above conditions (step S207: YES), the control unit 31 acquires the period specified in the "period" T63 and the value of the "number of times" T65 from the data row. (Step S208).

Next, the control unit 31 refers to the history table T7 (FIG. 8), and the value of the “employee ID” T73 is the ID of the employee A, and the “implementation date” T74 is designated as the “period” T63 acquired in step S208. The number of data included in the specified period and for which the "operation type" T75 is displayed is counted (step S209).

Next, the control unit 31 compares the value of the “number of times” T65 (displayable number of times value) acquired in step S208 with the value counted in step S209 (count value), and the count value is smaller than the displayable number of times value. Whether or not it is determined (step S210).

Then, when the count value is equal to or greater than the displayable number of times value (step S210: NO), the control unit 31 sends message information such as "the personal number displayable number of times has been exceeded" to the client terminal via the communication unit 34. It is transmitted to No. 1 (step S211), and this process is terminated.

On the other hand, when the count value is smaller than the displayable number of times value (step S210: YES), the control unit 31 refers to the personal number management table T5 (FIG. 6) and acquires a personal number matching the ID of employee A. (Step S212), the personal number information is transmitted to the client terminal 1 via the communication unit 34 (step S213).

Next, the control unit 31 adds a data row of a login ID, an employee ID, an execution date, and an operation type (display) to the history table T7 (FIG. 8) (step S214), and ends this process.

In step S211 above, the control unit 11 of the client terminal 1 causes the display unit 13 to display the display error screen G2 based on the information for displaying the message transmitted from the personal number management server 3.
FIG. 12 is a diagram showing an example of the display error screen G2.
As shown in FIG. 12, the display error screen G2 includes a message display unit G21 and an OK button G22 for ending the operation on the display error screen G2.
The user can recognize on the display error screen G2 that the number of times the personal number can be displayed exceeds the upper limit.

Further, in step S213, the control unit 11 of the client terminal 1 causes the display unit 13 to display the personal number display screen for displaying the personal number transmitted from the personal number management server 3.
FIG. 13 is a diagram showing an example of the personal number display screen G3.
As shown in FIG. 13, the personal number display screen G3 includes a personal number display unit G31 and an OK button G32 for ending the operation on the personal number display screen G3.
The user can recognize the personal number of the selected employee (employee A) on the personal number display screen G3.

<Personal number printing process>
Next, a process of accessing the personal number management server 3 from the client terminal 1 and printing the personal number (personal number printing process) will be described with reference to the flowchart of FIG.
In this process, the control unit 11 of the client terminal 1 accepts the input of login information (login ID, login password, etc.) required for accessing (login) the personal number management server 3, and receives the input login information. , Is started by transmitting to the personal number management server 3 via the communication unit 14.

First, the control unit 31 of the personal number management server 3 receives the login information transmitted from the client terminal 1 via the communication unit 34 (step S301).

Next, the control unit 31 refers to the login user management table T1 (FIG. 2) and determines whether or not the received login information is registered in the personal number management server 3 (step S302).

Then, when it is determined that the login information is not registered in the personal number management server 3 (step S302: NO), the control unit 31 ends this process.

On the other hand, when it is determined that the login information is registered in the personal number management server 3 (step S302: YES), the control unit 31 refers to the authority management table T2 (FIG. 3), and the login included in the login information. It is determined whether or not the ID has the authority to print the personal number (step S303).

When the control unit 31 determines that the login ID included in the login information does not have the authority to print the personal number (step S303: NO), the control unit 31 ends this process.

On the other hand, when it is determined that the login ID included in the login information has the authority to print the personal number (step S303: YES), the control unit 31 displays a screen for selecting an employee (employee list screen) and a form. Information (screen information) of the screen (form selection screen) for selection is generated and transmitted to the client terminal 1 via the communication unit 34 (step S304).

As a result, the control unit 11 of the client terminal 1 causes the display unit 13 to display the employee list screen and the form selection screen (both not shown) based on the screen information transmitted from the personal number management server 3.
When an employee (for example, Employee B) is selected on the employee list screen and a form (for example, Form B) is selected on the form selection screen, the control unit 11 of the client terminal 1 selects. The name of the employee (name of employee B) and the name of the form (name of form B) are transmitted to the personal number management server 3 via the communication unit 14.

Next, the control unit 31 determines whether or not the employee name and the form name have been received from the client terminal 1 via the communication unit 34 (step 305), and receives the employee name and the form name (step S305: YES). ), The employee ID (ID of employee B) corresponding to the received employee name (name of employee B) is acquired with reference to the employee management table T4 (FIG. 5) (step S306).

Next, the control unit 31 refers to the form layout management table T3 (FIG. 4), the name of the "form name" T32 matches the received form name (name of the form B), and the "createable period" T33. It is determined whether or not there is a data row including the date of today (the date of processing) in the period specified in (step S307).

Then, when it is determined that there is no data line that matches the above conditions (step S307: NO), the control unit 31 sends message information such as "cannot create form data" via the communication unit 34. Is transmitted to the client terminal 1 (step S308), and this process is terminated.

On the other hand, when there is a data row that matches the above conditions (step S307: YES), the control unit 31 controls the period specified in the form ID of the "form ID" T31 and the "createable period" T33 of the data row. , And the data of the “layout data” T34 (step S309).

Next, the control unit 31 refers to the display / print count management table T6 (FIG. 7), the value of the "employee ID" T61 is the ID of the employee B, the "operation type" T62 is the print, and the "form". It is determined whether or not there is a data line in which "ID" T64 matches the form ID of form B (form ID acquired in step S309) (step S310).

Then, when it is determined that there is no data row that matches the above conditions (step S310: NO), the control unit 31 ends this process.
On the other hand, when there is a data row that matches the above conditions (step S310: YES), the control unit 31 acquires the period specified in the "period" T63 and the value of the "number of times" T65 from the data row. (Step S311).

Next, the control unit 31 refers to the history table T7 (FIG. 8), and the value of the “employee ID” T73 is the ID of the employee B, and the “implementation date” T74 is designated as the “period” T63 acquired in step S311. The number of data included in the period, the "operation type" T75 is printing, and the "form ID" T76 matches the ID of the form B is counted (step S312).

Next, the control unit 31 compares the value of the “number of times” T65 (printable number of times value) acquired in step S311 with the value counted in step S312 (count value), and the count value is smaller than the printable number of times value. Whether or not it is determined (step S313).

Then, when the count value is equal to or greater than the printable number of times value (step S313: NO), the control unit 31 sends a message such as "The personal number printable number of times has been exceeded" to the client terminal 1 via the communication unit 34. (Step S314), and this process is terminated.

On the other hand, when the count value is smaller than the printable number of times value (step S313: YES), the control unit 31 refers to the personal number management table T5 (FIG. 6) and acquires a personal number matching the ID of employee B. (Step S315), a form print image with an individual number is created and transmitted to the printing device 5 via the communication unit 34 (step S316).

Next, the control unit 31 adds a data line of a login ID, an employee ID, an execution date, an operation type (print), and a form ID to the history table T7 (FIG. 8) (step S317), and ends this process.

In step S308, the control unit 11 of the client terminal 1 causes the display unit 13 to display the print error screen G4 for displaying the message transmitted from the personal number management server 3.
FIG. 15 is a diagram showing an example of the print error screen G4.
As shown in FIG. 15, the print error screen G4 includes a message display unit G41 and an OK button G42 for ending the operation on the print error screen G4.
The user can recognize that there is no form data that can be created on the print error screen G4.

Further, in step S314, the control unit 11 of the client terminal 1 causes the display unit 13 to display the print error screen G5 for displaying the message transmitted from the personal number management server 3.
FIG. 16 is a diagram showing an example of the print error screen G5.
As shown in FIG. 16, the print error screen G5 includes a message display unit G51 and an OK button G52 for ending the operation on the print error screen G5.
On the print error screen G5, the user can recognize that the number of printable times of the personal number exceeds the upper limit.

Further, in step S316, the control unit 51 of the printing device 5 prints the form F1 with the personal number based on the form print image with the personal number transmitted from the personal number management server 3.
FIG. 17 is a diagram showing a dependent deduction report, which is an example of a printed form F1 with an individual number.
As shown in FIG. 17, the form F1 (dependent deduction report) with an individual number includes a personal information display area F11 and the like for displaying personal information of the employee.
In the personal information display area F11, in addition to each area for displaying the place of employment, the address of the place of employment, the name, the date of birth, the address, the presence or absence of a spouse, etc., the individual number (my number) of the employee is displayed. My number display area F111 is included.
The personal number transmitted from the personal number management server 3 is described in the my number display area F111.

As described above, according to the present embodiment, the control unit 31 sets the number of times the personal number can be used (the number of times it can be displayed and the number of times it can be printed), counts the number of times the personal number has been used, and uses the set value as the count value. Compare with the possible number of times, and when the count value reaches the available number of times, the use of the personal number is prohibited.
Therefore, by setting a limit on the number of times the personal number can be used, unnecessary personal number display / printing can be suppressed, and the robustness of preventing leakage of personal information can be enhanced.
In addition, when unauthorized use is performed, conventionally, the operation is to track the problem with a log after the problem is discovered, but in the present invention, the possibility of finding the problem at an earlier stage is increased depending on whether or not the number of usable times is exceeded. be able to.

Further, according to the present embodiment, the authority management table T2 (FIG. 3) for storing the user who has the authority to set the number of times the individual number can be used is provided, and the control unit 31 is stored in the authority management table T2. Set the number of times it can be used according to the operation by the user.
Therefore, since the number of times that the individual number can be used is set by the authorized user, the management of the personal number can be strengthened.

Further, according to the present embodiment, the authority management table T2 (FIG. 3) for storing the user who has the authority to change the set usable number of times is provided, and the control unit 31 is stored in the authority management table T2. The set number of usable times is changed according to the operation by the user.
Therefore, since the number of times that the individual number can be used is changed by the authorized user, the management of the individual number can be strengthened.

Further, according to the present embodiment, the control unit 31 sets the number of times the personal number can be displayed and the number of times the personal number can be printed as the number of times the personal number can be used.
Therefore, it is possible to prohibit the use of unnecessary personal numbers in the display and printing of personal numbers.

Further, according to the present embodiment, the control unit 31 sets the number of times the personal number can be displayed together with the displayable period.
Therefore, by setting the displayable number of times in combination with the displayable period, flexible control becomes possible even if there is a bias in the timing of performing the personal number business. That is, when the implementation period of the work using the personal number is determined in advance, the robustness of leakage prevention can be further enhanced by designating the upper limit of the number of times of use for each period.

Further, according to the present embodiment, the control unit 31 sets the number of times the personal number can be printed together with the type of form on which the personal number is printed.
Therefore, by setting the number of printable times in combination with the type of form, flexible control according to the type of form becomes possible.

In the above description, an example in which the HDD and SSD of the storage unit 15 are used as the computer-readable medium of the program according to the present invention has been disclosed, but the present invention is not limited to this example. As another computer-readable medium, a portable recording medium such as a flash memory or a CD-ROM can be applied. A carrier wave is also applied to the present invention as a medium for providing data of a program according to the present invention via a communication line.

The description in the above embodiment is an example of the information processing device and the program according to the present invention, and is not limited thereto.

For example, in the above embodiment, the number of times the personal number can be used and the number of times the printable number can be printed are set, but the number of times the individual number can be displayed and the number of times the printable number can be printed are set. Is also good.

Further, it goes without saying that the detailed configuration and detailed operation of each component of the personal number management system 100 in the above embodiment can be appropriately changed without departing from the spirit of the present invention.

Although the embodiments of the present invention have been described, the scope of the present invention is not limited to the above-described embodiments, but includes the scope of the invention described in the claims and the equivalent scope thereof.
The inventions described in the claims originally attached to the application of this application are added below. The claims in the appendix are as specified in the claims originally attached to the application for this application.
[Additional Notes]
<Claim 1>
A storage means for storing the number of times the personal number can be used, and
A counting means for counting the number of times the personal number has been used, and
The count value counted by the counting means is compared with the usable number of times stored in the storage means, and when the count value reaches the usable number of times, the use of the personal number is prohibited. Restrictions and
Information processing device equipped with.
<Claim 2>
The information processing device according to claim 1, wherein the storage means stores the number of times the personal number can be used for each user specified by the personal number.
<Claim 3>
The information processing device according to claim 1, wherein the storage means stores the number of times the personal number can be used for each form including the personal number.
<Claim 4>
The information processing device according to claim 1, wherein the storage means stores the number of times the personal number can be used for each purpose of using the personal number.
<Claim 5>
The information processing device according to claim 1, wherein the storage means stores the number of times the personal number can be used for each device that uses the personal number.
<Claim 6>
The information processing device according to claim 1, wherein the storage means stores the number of times the personal number can be used for each period in which the personal number is used.
<Claim 7>
A registration means for registering a user who has the authority to set the number of times the personal number can be used, and
A storage control means for storing the usable number of times in the storage means in response to an operation by a user registered in the registration means.
The information processing apparatus according to any one of claims 1 to 6.
<Claim 8>
A second registration means for registering a user who has the authority to change the number of times the personal number can be used stored in the storage means, and
A second storage control means that changes the usable number of times stored in the storage means according to an operation by a user registered in the second registration means.
The information processing apparatus according to any one of claims 1 to 7.
<Claim 9>
The information processing according to any one of claims 1 to 8, wherein the storage means stores at least one of the number of times the personal number can be displayed and the number of times the personal number can be printed as the number of times the personal number can be used. Device.
<Claim 10>
The information processing device according to claim 9, wherein the storage means stores the number of times the personal number can be displayed together with the displayable period.
<Claim 11>
The information processing device according to claim 9, wherein the storage means stores the printable number of times of the personal number together with the type of form for printing the personal number.
<Claim 12>
Computer,
A storage means for storing the number of times an individual number can be used,
A counting means for counting the number of times the personal number has been used,
The count value counted by the counting means is compared with the usable number of times stored in the storage means, and when the count value reaches the usable number of times, the use of the personal number is prohibited. Restriction means,
A program to function as.

1 Client terminal (information processing device)
11 Control unit 12 Operation unit 13 Display unit G1 Individual number registration screen G13 Individual number input field G14 Displayable number of times setting field G141 Period setting field G142 Number of times setting field G15 Printable number of times setting field G151 Form name field G152 Number of times setting field G2 Display error Screen G3 Individual number display screen G31 Individual number display unit G4, G5 Print error screen 14 Communication unit 15 Storage unit 3 Individual number management server (information processing device)
31 Control unit (counting means, use limiting means, memory control means, second memory control means)
32 Operation unit 33 Display unit 34 Communication unit 35 Storage unit (storage means, registration means, second registration means)
T1 Login user management table T2 Authority management table T3 Form layout management table T4 Employee management table T5 Individual number management table T6 Display / print count management table T7 History table 5 Printing device (information processing device)
51 Control unit 52 Communication unit F1 Form F11 Personal information display area F111 My number display area 100 Personal number management system N Communication network

Claims (11)

An information processing device that can display or print a predetermined form.
A storage means in which the number of times an individual number can be used in a predetermined form is stored in association with a predetermined seasonal time.
The number of times the personal number is displayed and used in the personal number entry field in the predetermined form, and the number of times the display is used in the current year corresponding to the predetermined seasonal time, or in the predetermined form. A counting means that counts as a count value the number of times the personal number has been printed in the personal number entry field and the number of times the print has been used in the current fiscal year in which the print use date corresponds to the predetermined seasonal period.
If the current date and time non-corresponding to the predetermined seasonal period, and, the use of the said storage means and counted the count value in association with the predetermined seasonal time stored by said counting means When the count value reaches the usable number of times in comparison with the possible number of times, the use restricting means for prohibiting the display use or printing use of the personal number in the personal number entry field, and
Bei to give a,
The counting means counts the count value for each year corresponding to the current date and time.
The use limiting means is an information processing device that prohibits the display use or printing use of the personal number based on the count value corresponding to the current year for each year corresponding to the current date and time. The storage means stores the number of times the personal number can be used for each user specified by the personal number.
The information processing device according to claim 1, wherein the counting means counts the number of times the display is used or the number of times the print is used for each user specified by the personal number. The storage means stores the number of times the personal number can be used for each individual form.
The information processing device according to claim 1 or 2, wherein the counting means counts the number of times the display is used or the number of times the print is used for each of the individual forms. The storage means stores the number of times the personal number can be used for each purpose of using the personal number.
The information processing device according to any one of claims 1 to 3, wherein the counting means counts the number of times the display is used or the number of times the print is used for each purpose of using the personal number. The storage means stores the number of times the personal number can be used for each device that uses the personal number.
The information processing device according to any one of claims 1 to 4, wherein the counting means counts the number of times the display is used or the number of times the print is used for each device that uses the personal number. A registration means for registering a user who has the authority to set the number of times the personal number can be used, and
A storage control means for storing the usable number of times in the storage means in response to an operation by a user registered in the registration means.
The information processing apparatus according to any one of claims 1-5 comprising a. A second registration means for registering a user who has the authority to change the number of times the personal number can be used stored in the storage means, and
A second storage control means that changes the usable number of times stored in the storage means according to an operation by a user registered in the second registration means.
The information processing apparatus according to any one of claims 1 to 6. The storage means stores the number of times the personal number can be used individually for the display use and the print use.
The information processing apparatus according to any one of claims 1 to 7, wherein the counting means individually counts the number of times the display is used and the number of times the print is used for the display use and the print use. The storage means stores the number of times the personal number can be used for each type of form.
The information processing device according to any one of claims 1 to 8, wherein the counting means counts the number of times the display is used or the number of times the print is used for each type of form. The information processing device according to any one of claims 1 to 9, wherein the predetermined form has at least a name entry field and an address entry field in addition to the personal number entry field. A computer with an information processing device that can display or print a predetermined form,
The number of times the personal number is displayed in the personal number entry field in the predetermined form and the number of times the display is used in the current year corresponding to the predetermined seasonal time, or the individual in the predetermined form. A counting means that counts as a count value the number of times the personal number has been printed in the number entry field and the number of times the person has used the print in the current year corresponding to the predetermined seasonal time.
When the current date and time does not correspond to the predetermined seasonal time, and the personal number stored in advance in the storage means in association with the count value counted by the counting means and the predetermined seasonal time. When the count value reaches the usable number of times in comparison with the usable number of times, the use restricting means for prohibiting the display use or printing use of the personal number in the personal number entry field,
To function as
The counting means counts the count value for each year corresponding to the current date and time.
The use restricting means is a program that prohibits the display use or printing use of the personal number based on the count value corresponding to the current year for each year corresponding to the current date and time.

Images