Information processing system and information processing method

Abstract

To provide an information processing system that easily deals with the closure of business stores in a financial institution.SOLUTION: An information processing system includes a plurality of systems that are communicatively connected to business store systems of a plurality of business stores of a financial institution and allow task processing to be executed by the business store systems. The information processing system includes: a store closure information acquisition unit that acquires store closure information including information on a business store that is to be closed among the plurality of business stores or information on the business store system of the business store that is to be closed; and an access control list generation unit that generates an access control list that restricts communication connections from the business store system of the business store that is to be closed to at least some of the plurality of systems based on the store closure information.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] An embodiment of the present invention relates to an information processing system used in the business processing of a financial institution. Also, an embodiment of the present invention relates to an information processing method used in the business processing of a financial institution. [Background technology]

[0002] A financial institution has an integrated system that integrates systems necessary for business processing, such as an accounting system, an information system, and an electronic document system. In order to provide financial products or services to customers, a branch of the financial institution accesses the integrated system via a communication connection, executes business processing using one or more systems included in the integrated system, and provides financial products or services to customers.

[0003] The integrated systems of financial institutions are essential core systems for executing business processes, and are used not only for communication connections from domestic branches, but also from overseas branches. For this reason, it is often difficult to replace the integrated system itself. In particular, financial institutions require high reliability and stability in their business processes, so they continue to use integrated systems that are built with old technologies. Systems built with such old technologies are generally called legacy systems. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2003-162633 A Summary of the Invention [Problem to be solved by the invention]

[0005] Even in legacy systems such as the integrated systems of financial institutions, new technologies are introduced in response to changes and additions to business processes. However, as a result of partial modifications and additions of functions in response to changes and additions to business processes, the integrated systems have become bloated, complicated, and black boxes, and problems have arisen in which the burden on workers who modify the integrated systems has increased.

[0006] For example, when a financial institution closes a branch, it is necessary to modify the integrated system in response to the branch closure, such as deleting the branch number of the branch and modifying the schedule of the branch to be closed. However, modifying an integrated system built with old technology requires time and manpower to analyze the contents of the integrated system, which increases the burden on workers as described above. In addition, the cost required for modifying the integrated system also tends to increase.

[0007] In view of the above problems, one embodiment of the present invention has an object to provide an information processing system including a plurality of systems used in the business processing of a financial institution, which facilitates the process of closing a business branch when the branch is closed. Also, one embodiment of the present invention has an object to provide an information processing method in an information processing system including a plurality of systems used in the business processing of a financial institution, which facilitates the process of closing a business branch when the branch is closed. [Means for solving the problem]

[0008] An information processing system according to one embodiment of the present invention is an information processing system that is communicatively connected to the business store system of each of a plurality of business stores of a financial institution and includes a plurality of systems that are used in the business processing of the business store systems, and includes a store closure information acquisition unit that acquires store closure information including information about a business store that is closing among the plurality of business stores or information about the business store system of the business store that is closing, and an access control list generation unit that generates an access control list that restricts communication connections from the business store system of the business store that is closing to at least some of the plurality of systems based on the store closure information.

[0009] At least some of the multiple systems may be accounting systems.

[0010] The closure information acquisition unit may identify source information from which information about a business store that is closing is transmitted, and when the identified source information matches predetermined source information, the closure information acquisition unit may acquire the closure information.

[0011] An information processing method according to one embodiment of the present invention is an information processing method in an information processing system including a plurality of systems that are communicatively connected to the business store systems of a plurality of business stores of a financial institution and are used in the business processing of the business store systems, and obtains store closure information including information on a business store that is to be closed among the plurality of business stores, and generates an access control list that restricts communication connections from the business store system of the business store that is to be closed to at least some of the plurality of systems. Effect of the Invention

[0012] According to the information processing system or information processing method of one embodiment of the present invention, when a business branch of a financial institution is closed, the workload of workers can be reduced and costs can be reduced. Also, according to the information processing system or information processing method of one embodiment of the present invention, when a closed business branch is reopened, the branch can be easily restored to its original state without executing complicated processing. [Brief description of the drawings]

[0013] [Figure 1] 1 is a block diagram showing a configuration of an information processing system according to an embodiment of the present invention. [Diagram 2] 1 is a block diagram showing a configuration of an access control device of an information processing system according to an embodiment of the present invention. [Diagram 3] 11 is a flowchart illustrating a store closure process of a business store system in the information processing method according to an embodiment of the present invention. [Figure 4]1 is a schematic diagram illustrating access control of an open store system after a store closure process in an information processing system according to an embodiment of the present invention. FIG. [Diagram 5] 1 is a schematic diagram illustrating access control of an open store system after a store closure process in an information processing system according to an embodiment of the present invention. FIG. [Figure 6] 1 is a schematic diagram illustrating access control of an open store system after a store closure process in an information processing system according to an embodiment of the present invention. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. This embodiment is merely an example of the present invention, and the present invention is not limited to this embodiment. In other words, the present invention can be implemented even in a modified embodiment in which a known technique is applied to the present embodiment.

[0015] In this specification, the letters "first," "second," or "third" attached to each component are convenient labels used to distinguish each component and have no other meaning unless otherwise specified.

[0016] In this specification, the term "financial institution" refers to an institution that can carry out financial transactions. Examples of "financial institution" include, but are not limited to, banks, post offices, insurance companies, and securities companies.

[0017] In this specification, a "server" refers to a computer or program that can provide a specific service through a network. A "server" is, for example, a computer such as a workstation or a personal computer, and includes a central processing unit (CPU) as a computing means and a random access memory (RAM) as a storage means. A "server" may also include a communication interface, a user interface, or storage. In a "server," the CPU, memory, storage, and communication interface may each be electrically connected by a communication bus, or may be connected by cloud computing. A "server" may be one computer or multiple computers.

[0018] In this specification, the term "system" may refer to a "server."

[0019] In this specification, the term "information communication terminal" refers to an information device that can access information through a network. Examples of the "information communication terminal" include, but are not limited to, a mobile phone, a smartphone, a tablet, or a personal computer.

[0020] In this specification, a "network" refers to a system in which multiple computers are connected by wire or wirelessly, enabling them to communicate with each other, such as the Internet or an intranet. A "network" may be a dedicated line or a VPN. From the perspective of security, it is preferable to use a dedicated line in a closed network within a financial institution.

[0021] <1. Configuration of Information Processing System 1> FIG. 1 is a block diagram showing a configuration of an information processing system 1 according to an embodiment of the present invention.

[0022] 1, the information processing system 1 includes an integrated system 10, a first business store system 20-1, a second business store system 20-2, ..., and an n-th business store system 20-n, and an access control device 30. Here, when there is no particular distinction between the first business store system 20-1, the second business store system 20-2, ..., and the n-th business store system 20-n, they will be described as a business store system 20 for convenience.

[0023] The integrated system 10 is communicatively connected to the access control device 30 via a network NW. In addition, the business store system 20 is communicatively connected to the access control device 30 via the network NW. In other words, the business store system 20 can be communicatively connected to the integrated system 10 via the access control device 30.

[0024] Integrated system 10 includes multiple systems, and each of multiple business branches of the financial institution can perform financial operations through business processing executed in one or multiple systems of integrated system 10. In other words, integrated system 10 is a system in which multiple systems that are the core of business processing of the financial institution are integrated. Integrated system 10 includes accounting system 11, information system 12, and electronic document system 13. Business branch system 20 can use accounting system 11, information system 12, and electronic document system 13 included in integrated system 10 via network NW.

[0025] Accounting system 11 is a system that executes business processes related to accounting operations such as remittance, settlement, loans, and foreign exchange. Accounting ledgers in which transactions are recorded are stored in accounting system 11, and business processes are executed based on the accounting ledgers. By using accounting system 11, each of the business branches of the financial institution can provide customers with financial products and services such as remittance, settlement, loans, and foreign exchange.

[0026] The information system 12 is a system that executes business processes aimed at supporting financial operations. For example, the information system 12 can update calendar information of business branches. Also, for example, the information system 12 analyzes accumulated information such as customer information and transaction information, and executes screening processes. This makes it possible to detect fraudulent remittances, etc. Also, each of the business branches of the financial institution can propose financial products and services tailored to customer needs based on the information analyzed by the information system 12.

[0027] The electronic document system 13 is a system that executes business processes related to the computerization of documents used in financial operations. Each of the branches of the financial institution can provide computerized documents to customers by using the electronic document system 13.

[0028] In the integrated system 10, the accounting system 11, the information system 12, and the electronic form system 13 may each be executed independently, or may be executed in conjunction with one another.

[0029] The integrated system 10 may include systems other than the accounting system 11, the information system 12, and the electronic document system 13. For example, the integrated system 10 may include an external system for communicating with computers and ATMs of financial institutions other than the financial institution having the information processing system 1.

[0030] The business store system 20 is a system used to carry out financial operations at business stores of financial institutions. Employees at the business stores can use the integrated system 10 via the business store system 20 to provide financial products or services to customers. In other words, the business store system 20 is communicatively connected to the integrated system 10 and can use the integrated system 10 to execute business processes according to customer requests.

[0031] The sales store system 20 is, for example, a server installed in each of a plurality of sales stores. Employees of the sales stores can use the integrated system 10 to perform financial operations by connecting their respective information communication terminals to the sales store system 20 for communication. However, the configuration of the sales store system 20 is not limited to the configuration described above. The sales store system 20 may be, for example, an information communication terminal of an employee of the sales store. In this case, a program that enables use of the integrated system 10 is installed in the employee's information communication terminal, and the sales store system 20 can be used by executing the program.

[0032] In addition, in the sales store system 20, different authorities may be set for each employee when using the integrated system 10. For example, some employees may be set with authority to use the accounting system 11 and the information system 12, and other employees may be set with authority to use only the accounting system 11. Furthermore, the setting of authority when using the integrated system 10 is not limited to setting on a system basis such as the accounting system 11 and the information system 12, but may also be set on a transaction processing basis executed in the accounting system 11.

[0033] The access control device 30 controls whether or not a communication connection between the integrated system 10 and the business store system 20 is established. The access control device 30 may be included in the integrated system 10, or may be a device separate from the integrated system 10. Although one access control device 30 is connected to one integrated system 10 in FIG. 1, multiple access control devices 30 may be connected to one integrated system 10. For example, multiple access control devices 30 may be provided separately for domestic business stores and overseas business stores.

[0034] Here, the configuration of the access control device 30 will be described with reference to FIG.

[0035] 2. Configuration of the access control device 30 FIG. 2 is a block diagram showing a configuration of the access control device 30 of the information processing system according to one embodiment of the present invention.

[0036] 2, the access control device 30 includes an access control unit 31, an access control list 32, a closed store information acquisition unit 33, and an access control list generation unit 34. The access control device 30 is, for example, a computer or a communication interface. The access control device 30 can cause the access control unit 31, the closed store information acquisition unit 33, and the access control list generation unit 34 to function by executing a predetermined program.

[0037] The access control unit 31 controls the communication connection between the integrated system 10 and the sales store system 20 based on the access control list 32 .

[0038] The access control list 32 is a list of settings for allowing or denying a communication connection between the integrated system 10 and the business store system 20. For example, the access control list 32 includes a setting for denying access from the first business store system 20-1 to the integrated system 10 and permitting access from the second business store system 20-2 to the integrated system 10. The permission or denial of a communication connection in the access control list 32 may be set by the name of the business store system 20, the branch number of the business store, or an IP address. Furthermore, the access control list 32 can set not only permission or denial of access to the entire integrated system 10, but also permission or denial of access to some of the systems of the integrated system 10 (the accounting system 11, the information system 12, or the electronic document system 13).

[0039] The closure information acquisition unit 33 acquires closure information regarding a business store to be closed. When a business store is to be closed, closure information generated by an input operation by an operator is transmitted to the access control device 30. When the closure information is received by the access control device 30, the closure information acquisition unit 33 acquires the closure information. The closure information includes information on the business store to be closed (such as the name or store number of the business store) or information on the business store system 20 of the business store to be closed (such as the name or IP address of the business store system 20). Here, the configuration in which closure information is transmitted to the access control device 30 includes not only a configuration in which closure information is transmitted to the access control device 30 via a communication connection, but also a configuration in which closure information is directly input to the access control device 30.

[0040] The closure information acquisition unit 33 may acquire the closure information based on a predetermined judgment condition. For example, the closure information acquisition unit 33 may identify source information (e.g., IP address) from which information on a business store to be closed is transmitted, and acquire the closure information when the identified source information matches preset source information. This improves the security of the information processing system 1 because the closure information is acquired only by a command transmitted from a preset source. Also, it is easily identified from the source information that the information is about the closure of a business store.

[0041] The access control list generating unit 34 generates an access control list based on the closed store information acquired by the closed store information acquiring unit 33. In addition, the access control list generating unit 34 updates the access control list 32 using the generated access control list.

[0042] In the information processing system 1 of this embodiment, since the access control device 30 includes the above-mentioned components, an operator can simply send store closure information to the access control device 30, and the store closure process of the operating store system 20 can be executed in response to the closure of an operating store.

[0043] Now, with reference to FIG. 3, the store closure process of the open store system 20 in the information processing system 1 will be described.

[0044] <3. Closing of business store system 20 in information processing system 1> Fig. 3 is a flowchart illustrating the store closure process of the open store system 20 in the information processing method according to one embodiment of the present invention. Also, each of Figs. 4 to 6 is a schematic diagram illustrating access control of the open store system 20 after the store closure process in the information processing system 1 according to one embodiment of the present invention.

[0045] The flowchart shown in Fig. 4 includes steps S10 to S30. Each step will be described below in order.

[0046] In step S10, the store closure information acquisition unit 33 acquires store closure information regarding the business store to be closed. When it is decided to close a business store of a financial institution, an operator transmits store closure information to the access control device 30 for restricting access to the integrated system 10 from the business store system 20 of the business store to be closed. The store closure information is received by the access control device 30, and the store closure information acquisition unit 33 determines whether the received information is store closure information or not, and acquires the store closure information when it is determined to be store closure information. For example, the store closure information acquisition unit 33 can determine that the received information is store closure information by detecting a store closure command code included in the store closure information.

[0047] The store closure information may include not only information about the business store to be closed or information about the business store system 20 of the business store to be closed, but also information that restricts access to only some systems of the integrated system 10, such as the accounting system 11.

[0048] In step S10, when the closure information acquisition unit 33 acquires the closure information, the closure information acquisition unit 33 may identify the source of the command. For example, the IP address of the source of the command may be identified, and the closure information may be acquired by the closure information acquisition unit 33 when the identified IP address matches a preset IP address. In addition, when the worker transmits the closure information using the open store system 20 of the open store to be closed, the closure information acquisition unit 33 may determine whether the information of the open store or the open store system 20 included in the closure information matches the information of the source of the closure information. In this case, when the information of the open store or the open store system 20 included in the closure information matches the information of the source of the closure information, the closure information is acquired by the closure information acquisition unit 33.

[0049] In step S20, the access control list generation unit 34 generates an access control list based on the acquired store closure information. Specifically, an access control list is generated that restricts access from the business store system 20 of the closed store to the integrated system 10, or access from the business store system 20 of the open store to the business store system 20 of the closed store.

[0050] The access control list generated by the access control list generation unit 34 may not only restrict access to the integrated system 10, but may also be a list that restricts access to only some of the systems in the integrated system 10, for example, the accounting system 11.

[0051] In step S30, when the access control list is generated, the access control list generation unit 34 uses the generated access control list to update the access control list 32. This enables the access control unit 31 to control access to the business store system 20 based on the updated access control list 32.

[0052] Here, the access control of the open store system 20 after the store closing process of steps S10 to S30 is executed will be described with reference to Figures 4 to 6. Note that in Figures 4 to 6, the explanation will be given assuming that the first open store system 20-1 has been closed.

[0053] 4 shows a case where access from the first business store system 20-1 to the integrated system 10 is restricted. Even if an attempt is made to execute business processing using the accounting system 11 in the first business store system 20-1, access from the first business store system 20-1 to the integrated system 10 is restricted by the access control device 30. As a result, business processing cannot be executed using the first business store system 20-1, and the first business store that used the first business store system 20-1 can be treated as having essentially closed down.

[0054] FIG. 5 shows a case where access from the second business store system 20-2 to the integrated system 10 via the first business store system 20-1 is restricted. For example, in the case of accounting for remittance from the second business store to the first business store, even if an attempt is made to remit money to the first business store system 20-1 using the second business store system 20-2, access to the accounting system 11 of the first business store system 20-1 is restricted by the access control device 30. Therefore, even if the second business store system 20-2 is used, business processing using the first business store system 20-1 cannot be executed. Therefore, even in this case, business processing cannot be executed using the first business store system 20-1, so the first business store that used the first business store system 20-1 can be treated as having been substantially closed.

[0055] FIG. 6 shows a case where access from the first business store system 20-1 to only the accounting system 11, which is a part of the integrated system 10, is restricted. For example, when an account balance inquiry is made using the first business store system 20-1, the access control device 30 restricts access from the first business store system 20-1 to the accounting system 11. Therefore, the first business store system 20-1 cannot execute business processing using the accounting system 11. On the other hand, access from the first business store system 20-1 to the information system 12 and the electronic document system 13 is permitted. Therefore, for example, it is possible to use the first business store system 20-1 to perform processing required for operating the integrated system 10, such as updating the calendar information of the first business store. However, even in this case, since accounting processing cannot be executed using the first business store system 20-1, the first business store that used the first business store system 20-1 can be treated as having been substantially closed.

[0056] In the above, the closing process of the open store system 20 has been described as one of the information processing methods according to the present embodiment, but the information processing method according to the present embodiment can also restore the open store system 20 of a closed open store to its original state. Specifically, the access control list 32 can be updated so that the open store system 20 of the open store that is to be restored to its original state is not restricted, and the information processing system 1 can easily perform not only the closing process of the open store system 20 but also the restoration process.

[0057] As described above, according to the information processing system 1 or the information processing method of the present embodiment, when a business branch of a financial institution is closed, the access control list 32 of the access control device 30 is updated, and a store closure process is executed in which access from the business branch system 20 of the closed store to the integrated system 10 is restricted. In this store closure process, since no work such as modification or addition to the integrated system 10 is performed by an operator, the workload of the operator is reduced, and costs can be reduced. Furthermore, according to the information processing system 1 or the information processing method of the present embodiment, even if a business branch has been closed, it is possible to easily return it to its original state by updating the access control list 32. In other words, it is also easy to lift the access restriction from the business branch system 20 of a reopened store to the integrated system 10.

[0058] The embodiments of the present invention can be implemented by appropriately combining components as long as they are not mutually inconsistent. Furthermore, those in which a person skilled in the art appropriately adds or removes components or modifies designs based on the embodiments, or adds or omits steps or modifies conditions, are also included in the scope of the present invention as long as they include the gist of the present invention.

[0059] Even if there are other effects and advantages different from those brought about by the above-described embodiments, those which are clear from the description in this specification or which can be easily predicted by a person skilled in the art are naturally understood to be brought about by the present invention. [Explanation of symbols]

[0060] 1: information processing system, 10: integrated system, 11: accounting system, 12: information system, 13: electronic document system, 20: business store system, 20-1: first business store system, 20-2: second business store system, 20-n: nth business store system, 30: access control device, 31: access control unit, 32: access control list, 33: closed store information acquisition unit, 34: access control list generation unit

Claims

1. An information processing system including a plurality of systems that are communicatively connected to respective business store systems of a plurality of business stores of a financial institution and are used in business processing of the business store systems, a store closure information acquisition unit that acquires store closure information including information on a store that is to be closed among the plurality of stores or information on the store system of the store that is to be closed; and an access control list generation unit that generates an access control list that restricts communication connections from the business store system of the business store to be closed to at least some of the multiple systems based on the store closure information.

2. The information processing system according to claim 1 , wherein the at least some of the plurality of systems are accounting systems.

3. The information processing system of claim 1, wherein the store closure information acquisition unit identifies source information from which information of the closed business store is transmitted, and when the identified source information matches preset source information, the store closure information acquisition unit acquires the store closure information.

4. 1. An information processing method in an information processing system including a plurality of systems that are communicatively connected to respective business store systems of a plurality of business stores of a financial institution and that are used in business processing of the business store systems, comprising: Acquire store closure information including information on a store to be closed among the plurality of stores or information on the store system of the store to be closed; An information processing method for generating an access control list that restricts communication connections from the business store system of the business store to be closed to at least some of the multiple systems.

5. The information processing method according to claim 4 , wherein the at least some of the plurality of systems are accounting systems.

6. The information processing method according to claim 4, wherein the store closure information is acquired by identifying source information from which information about the store to be closed is transmitted and the identified source information matches preset source information.

Images