Information processing device and program

Abstract

To provide an information processing device and a program that can improve the security of a device.SOLUTION: An information processing device comprises a reception unit, an acquisition unitt, and a clearing unit. The reception unit receives a use start instruction for a device with use restriction from an employee. The acquisition unit acquires additional information on the employee upon receiving a use start instruction. The clearing unit clears the use restriction on the device if the employee is approved as a person who can use the device on the basis of the acquired additional information.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] An embodiment of the present invention relates to an information processing device and a program. [Background technology]

[0002] Conventionally, there are known product sales registration processing devices such as terminal devices of POS (Point Of Sales) systems (point of sale information management systems) used in retail stores and ECR (Electronic Cash Registers). The use (or operation) of such product sales registration processing devices is restricted so that only those authorized to use the devices can use them.

[0003] For this reason, in order to verify that a person attempting to use the device is authorized to use the device, when the person begins using the device, they are required to enter a code (identification information) that is uniquely assigned to each person in advance, and a password that is determined for that code (also known as "signing in," "signing on," "logging in," "logging on," etc.).

[0004] However, in such a system, if for some reason a password corresponding to a code assigned to a person authorized to use the device becomes known to a person not authorized to use the device, the person may be able to use the device. In other words, a situation may arise in which a non-employee signs in to a device such as a cash register and performs malicious actions such as operating the device to steal money. Summary of the Invention [Problem to be solved by the invention]

[0005] An object of the present invention is to provide an information processing device and a program capable of improving the security of the device. [Means for solving the problem]

[0006] An information processing device according to an embodiment includes a reception unit, an acquisition unit, and a release unit. The reception unit receives an instruction to start using a restricted device from an employee. When the acquisition unit receives the instruction to start using the device, it acquires additional information related to the employee. When the employee is recognized as a person who is permitted to use the device based on the acquired additional information, the release unit releases the usage restriction on the device. [Brief description of the drawings]

[0007] [Figure 1] FIG. 1 is an explanatory diagram illustrating an example of a POS system according to an embodiment. [Diagram 2] FIG. 2 is a block diagram illustrating an example of a hardware configuration of the authentication server according to the embodiment. [Diagram 3] FIG. 3 is a diagram illustrating an example of a data configuration of the employee master according to the embodiment. [Figure 4] FIG. 4 is a block diagram illustrating an example of a hardware configuration of the approver terminal according to the embodiment. [Diagram 5] FIG. 5 is a block diagram illustrating an example of a hardware configuration of a POS terminal according to the embodiment. [Figure 6] FIG. 6 is a diagram illustrating an example of a data configuration of the execution authority master according to the embodiment. [Figure 7] FIG. 7 is a block diagram showing an example of a functional configuration of each device in the POS system according to the embodiment. [Figure 8] FIG. 8 is a diagram illustrating an example of information included in an approval request according to the embodiment. [Figure 9] FIG. 9 is a flowchart illustrating an example of a process executed by the authentication server according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, an information processing device and a program according to an embodiment will be described in detail with reference to the drawings. The embodiment described below is an embodiment of the information processing device and the program, and does not limit the configuration, specifications, etc. of the information processing device and the program. This embodiment is an example of application to a POS system introduced in a store such as a mass retailer.

[0009] 1 is an explanatory diagram showing an example of a POS system 1 according to an embodiment. The POS system 1 includes an authentication server 10, an approver terminal 30, a POS terminal 50, and a network camera 70. The authentication server 10, the approver terminal 30, the POS terminal 50, and the network camera 70 are connected via a network N such as the Internet or a LAN (Local Area Network).

[0010] The authentication server 10 is, for example, a server-type computer. The authentication server 10 executes processes such as authenticating employees related to a sign-in request made by the POS terminal 50 and sending a notification of whether the POS terminal 50 can be used. The authentication server 10 also stores personal information such as employee accounts (identification information). In this embodiment, the authentication server 10 is provided in the back yard of a store.

[0011] The authentication server 10 does not necessarily have to be installed in the back yard of a store, but may be computer resources such as hardware and software provided by a cloud service provider. The authentication server 10 does not necessarily have to be a single computer, but may be configured as a distributed system consisting of multiple computers, a grid computing system consisting of multiple computers on a wide area network, or the like.

[0012] The approver terminal 30 is a terminal device used by an approver. The approver terminal 30 is, for example, a computer such as a personal computer. The approver terminal 30 approves a request to use the POS terminal 50 from an employee. The approver is, for example, a manager such as a store manager.

[0013] The POS terminal 50 executes a process of registering the sales amount of the sold products, a process of calculating the total amount of the sold products, etc. In this embodiment, a plurality of POS terminals 50 are provided in the sales floor of the store.

[0014] The POS terminal 50 also has a sign-in request function. That is, the POS terminal 50 requests the authentication server 10 to confirm that the account requested to sign in is a pre-registered employee. The POS terminal 50 also permits the employee to use the device on the condition that the POS terminal 50 receives a notification from the approver that the use of the POS terminal 50 has been approved.

[0015] The network camera 70 is a camera that can be connected to a network N such as the Internet or a LAN. In this embodiment, a plurality of network cameras 70 are provided. For example, the network cameras 70 are provided at positions that allow them to capture images of various locations in a store, such as a cash register counter, product shelves, and a back yard.

[0016] Next, the hardware configuration of each device included in the POS system 1 will be described.

[0017] 2 is a block diagram showing an example of a hardware configuration of authentication server 10. Authentication server 10 includes control unit 101, storage unit 102, communication interface 103, operation unit 104, and display unit 105. Control unit 101, storage unit 102, communication interface 103, operation unit 104, and display unit 105 are connected to each other via system bus 106 such as a data bus or address bus.

[0018] The control unit 101 controls the overall operation of the authentication server 10 and realizes various functions provided by the authentication server 10. The control unit 101 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory).

[0019] The CPU controls the overall operation of the authentication server 10. The ROM is a storage medium that stores various programs and data. The RAM is a medium that temporarily stores various programs and rewrites various data. The CPU uses the RAM as a work area and executes programs stored in the ROM or the storage unit 102, etc.

[0020] The storage unit 102 is a storage device such as a hard disk drive (HDD) or a solid state drive (SSD). The storage unit 102 stores a control program 107 and an employee master 108. The control program 107 is made up of an operating system, a program for realizing the functions provided by the authentication server 10, and the like. The control program 107 includes a program for realizing the functions according to this embodiment.

[0021] 3 is an explanatory diagram showing an example of the data configuration of the employee master 108. The employee master 108 is setting information in which personal information of employees of a business operator that operates one or more stores is registered. The employee master 108 stores an employee code, a password, a name, an affiliation code, and an authority rank in association with each other.

[0022] The employee code is identification information that can identify an employee. The employee code is also identification information for a user who uses the POS terminal 50. The password is information used in combination with the employee code to authenticate an employee. For example, a password is a string of letters and numbers. The employee code and password are used to determine whether or not an employee has an account.

[0023] Here, an account refers to the rights necessary to use a computer or network whose use is not open to the general public but is restricted to specific individuals. Therefore, an account is registered / issued for each individual user, and is composed of identification information (ID: IDentifier) ​​such as an identification number (such as an employee code) or identification name (user name, account name) that identifies each user, authentication information such as a PIN number or password to verify the user's identity, and setting information such as authority for each resource.

[0024] The name is the name of the employee with the employee code. The affiliation code is identification information that can identify the affiliation of the employee. For example, the affiliation code is a department code that indicates the department to which the employee belongs. The authority rank is information that indicates the hierarchy (class, group) of authority that is set in stages for employees. For example, as the number increases from "1", the authority decreases and the types of functions that can be executed become fewer.

[0025] The communication interface 103 is an interface for communicating with the approver terminal 30 and the like connected to the network 20 .

[0026] The operation unit 104 is an input device such as a keyboard or a mouse.

[0027] The display unit 105 is, for example, a liquid crystal display device. Note that the display unit 105 is not limited to a liquid crystal display device, and may be an organic EL display device or the like.

[0028] 4 is a block diagram showing an example of a hardware configuration of the approver terminal 30. The approver terminal 30 includes a control unit 301, a storage unit 302, a communication interface 303, an operation unit 304, and a display unit 305. The control unit 301, the storage unit 302, the communication interface 303, the operation unit 304, and the display unit 305 are connected to each other via a system bus 306 such as a data bus or an address bus.

[0029] The control unit 301 controls the overall operation of the approver terminal 30 and realizes various functions provided by the approver terminal 30. The control unit 301 includes a CPU, a ROM, and a RAM. The CPU comprehensively controls the operation of the approver terminal 30. The ROM is a storage medium that stores various programs and data. The RAM is a medium that temporarily stores various programs and stores various data in a rewritable manner. The CPU uses the RAM as a work area and executes programs stored in the ROM or the storage unit 302, etc.

[0030] The storage unit 302 is a storage device such as an HDD or SSD. The storage unit 302 stores a control program 307 and a store employee master 308. The control program 307 is a program that realizes the functions provided by the operating system and the approver terminal 30. The control program 307 includes a program that realizes the functions according to this embodiment.

[0031] The communication interface 303 is an interface for communicating with the authentication server 10 and the like connected to the network 20. The communication interface 303 is also an interface for communicating with the POS terminal 50 and the like connected to the network N.

[0032] The operation unit 304 is an input device such as a keyboard or a mouse.

[0033] The display unit 305 is, for example, a liquid crystal display device. Note that the display unit 305 is not limited to a liquid crystal display device, and may be an organic EL display device or the like.

[0034] 5 is a block diagram showing an example of a hardware configuration of the POS terminal 50. The POS terminal 50 includes a control unit 501, a storage unit 502, a communication interface 503, an operation unit 504, a first display unit 505, a second display unit 506, a printer 507, a card reader / writer 508, and a scanner 509.

[0035] The control unit 501, memory unit 502, communication interface 503, operation unit 504, first display unit 505, second display unit 506, printer 507, card reader / writer 508, and scanner 509 are connected to each other via a system bus 510 such as a data bus or address bus.

[0036] The control unit 501 controls the overall operation of the POS terminal 50 and realizes various functions provided by the POS terminal 50. The control unit 501 includes a CPU, a ROM, and a RAM. The CPU controls the overall operation of the POS terminal 50. The ROM is a storage medium that stores various programs and data. The RAM is a medium that temporarily stores various programs and rewrites various data. The CPU uses the RAM as a work area to execute programs stored in the ROM, the storage unit 502, etc.

[0037] The storage unit 502 is a storage device such as an HDD or SSD. The storage unit 502 stores a control program 511 and an execution authority master 512. The control program 511 is a program that realizes the functions provided by the operating system and the POS terminal 50. The control program 511 includes a program that realizes the functions according to this embodiment.

[0038] 6 is an explanatory diagram showing an example of the data configuration of the execution authority master 512. The execution authority master 512 is setting information in which an authority rank for permitting execution of a function is set for each function possessed by the POS terminal 50. The execution authority master 512 stores a function code, a function name, and an execution authority rank in association with each other.

[0039] The function code is identification information that can identify a function. The function name is information that indicates the name of the function. The execution authority rank is the authority rank of the employee who is permitted to execute the function of the function code. The POS terminal 50 executes the specified function on the condition that the authority rank of the signed-in employee is equal to or higher than the execution authority rank. In other words, the POS terminal 50 executes the specified function when the numerical value of the authority rank is equal to or lower than the numerical value of the execution authority rank.

[0040] The communication interface 503 is an interface for communicating with the authentication server 10, the approver terminal 30, and the like, which are connected to the network N.

[0041] The operation unit 504 is an input device such as a keyboard.

[0042] The first display unit 505 is a liquid crystal display device or the like having a touch panel laminated on a display surface. The first display unit 505 displays various screens, for example, for store employees. The second display unit 506 is a liquid crystal display device or the like having a touch panel laminated on a display surface. The second display unit 506 displays various screens, for example, for customers.

[0043] The printer 507 prints receipts and journals.

[0044] Card reader / writer 508 is a device that reads and writes information stored in a storage medium of a card used for settlement, such as a credit card.

[0045] The scanner 509 optically reads code information from a code symbol such as a barcode attached to the product that the customer wishes to purchase.

[0046] Next, a description will be given of characteristic functions of each device in the POS system 1. Here, Fig. 7 is a block diagram showing an example of a characteristic functional configuration of each device in the POS system 1.

[0047] First, a description will be given of the functions of the authentication server 10. The control unit 101 of the authentication server 10 loads the control program 107 stored in the storage unit 102 into the RAM, and generates each functional unit in the RAM by operating according to the control program 107. Specifically, the control unit 101 of the authentication server 10 includes, as functional units, a communication control unit 1001, an authentication unit 1002, an acquisition unit 1003, an approval request unit 1004, and a generation unit 1005.

[0048] The communication control unit 1001 controls the communication interface 103 to communicate with the approver terminal 30, the POS terminal 50, the network camera 70, and the like.

[0049] For example, the communication control unit 1001 receives a sign-in request from the POS terminal 50. The sign-in request is information requesting permission to use the POS terminal 50. The sign-in request also includes an employee code and a password. In this case, the sign-in request can be said to be a request for an instruction to start using the POS terminal 50, and therefore the communication control unit 1001 is an example of a reception unit.

[0050] Also, for example, the communication control unit 1001 transmits an approval request to the approver terminal 30. The approval request is information requesting that the person related to the sign-in request be permitted to use the POS terminal 50. The approval request includes an employee code, an employee name, and additional information described later. Also, for example, the communication control unit 1001 transmits a response notification to the sign-in request.

[0051] The authentication unit 1002 determines whether or not the person related to the sign-in request is an employee who has an account registered in the employee master 108. For example, when the communication control unit 1001 receives a sign-in request, the authentication unit 1002 extracts the employee code and password included in the sign-in request. When the extracted employee code and password are registered in the employee master 108, the authentication unit 1002 determines that the person is an employee who has a registered account.

[0052] On the other hand, if the extracted employee code and password are not registered in the employee master 108, the authentication unit 1002 determines that the person is not an employee. In this case, the authentication unit 1002 generates authentication failure information indicating that the employee code cannot be authenticated. Then, in cooperation with the communication control unit 1001, the authentication unit 1002 transmits the generated authentication failure information to the POS terminal 50.

[0053] The acquisition unit 1003 acquires additional information to be added to the approval request. For example, when the authentication unit 1002 determines that the user is an employee whose account is registered, the acquisition unit 1003 acquires the additional information.

[0054] As an example, the acquisition unit 1003 cooperates with the communication control unit 1001 to acquire an image (or a video image) captured by the network camera 70 from the network camera 70. Based on the image, the acquisition unit 1003 acquires, as additional information, location information indicating where in the store the employee identified by the employee code included in the sign-in request (hereinafter also referred to as the target employee) is currently located.

[0055] More specifically, information indicating the characteristics of an employee, such as a facial image, is associated with the employee code in the employee master 108 in the storage unit 102. The acquisition unit 1003 uses a known image recognition technique or the like to extract an image in which the target employee appears from a plurality of images captured by the network camera 70.

[0056] Additionally, each image captured by the network camera 70 has recorded therein location information indicating the location where the image was captured by the network camera 70. The acquisition unit 1003 acquires the location information recorded in the extracted image as the location information of the target employee. Additionally, the acquisition unit 1003 records, in the acquired location information of the target employee, the time when the location information was acquired.

[0057] In this embodiment, the location information of the target employee is acquired based on the image captured by the network camera 70, but the method of acquiring the location information is not limited to this. For example, the acquisition unit 1003 may acquire the location information of the target employee based on the sensing result of the sensor by having the employee wear a sensor such as a gyro sensor or always carry a terminal device equipped with a gyro sensor.

[0058] The approval request unit 1004 generates an approval request. For example, the approval request unit 1004 refers to the employee master 108 and identifies the name of the employee from the employee code included in the sign-in request received by the communication control unit 1001. The approval request unit 1004 generates an approval request including the employee code, the identified employee name, the additional information acquired by the acquisition unit 1003, and the acquisition time of the additional information.

[0059] Here, Fig. 8 is a diagram for explaining an example of information included in an approval request. As shown in Fig. 8, the information included in the approval request includes the time when the location information of the target employee was acquired, the employee code and name of the target employee, and the location information of the target employee. This allows the approver to easily understand who the target employee is, where the target employee is, and the time when the location information was acquired.

[0060] Returning to Fig. 7, the description will continue. The generation unit 1005 generates a response notification to the sign-in request. For example, the generation unit 1005 generates a use permission notification or a use refusal notification as the response notification. The use permission notification is a notification that permits the person related to the sign-in request to use the POS terminal 50. The use refusal notification is a notification that denies the person related to the sign-in request to use the POS terminal 50.

[0061] Here, when the POS terminal 50 receives the use permission notification, the use restriction on the POS terminal 50 is lifted. Therefore, the generating unit 1005 and the communication control unit 1001 can be said to be an example of a lifting unit.

[0062] As an example, when an approval notice described below is received from the approver terminal 30, the generation unit 1005 generates a use permission notice. On the other hand, when an approval disapproval notice described below is received from the approver terminal 30, the generation unit 1005 generates a use refusal notice. In this case, it can be said that the generation unit 1005 is determining whether the target employee is permitted to use the device. Therefore, in this case, the generation unit 1005 is an example of a determination unit.

[0063] Next, a description will be given of the functions of the approver terminal 30. The control unit 301 of the approver terminal 30 loads the control program 307 stored in the storage unit 302 into the RAM, and generates each functional unit in the RAM by operating according to the control program 307. Specifically, the control unit 301 of the approver terminal 30 includes a communication control unit 3001, an operation control unit 3002, an approval unit 3003, and a display control unit 3004 as functional units.

[0064] The communication control unit 3001 controls the communication interface 303 to communicate with the authentication server 10, etc. For example, the communication control unit 3001 receives an approval request from the authentication server 10. Also, for example, the communication control unit 3001 transmits a response notification to the approval request to the authentication server 10.

[0065] The operation control unit 3002 controls the operation unit 304 to receive an operation input. For example, the operation control unit 3002 receives a response operation to an approval request.

[0066] The approval unit 3003 generates a response notification to the approval request. For example, when the operation control unit 3002 receives an operation input from the approver to permit the target employee to use the POS terminal 50, the approval unit 3003 generates an approval notification as a response notification indicating that the target employee is approved. On the other hand, when the operation control unit 3002 receives an operation input to not permit the target employee to use the POS terminal 50, the approval unit 3003 generates a non-approval notification as a response notification indicating that the target employee cannot be approved.

[0067] The display control unit 3004 controls the display unit 305 to display various screens. For example, when the communication control unit 3001 receives an approval request, the display control unit 3004 causes the display unit 305 to display the time when the location information of the target employee was acquired, the employee code and name of the target employee, and the location information of the target employee, as shown in Fig. 8. The approver inputs, via the operation unit 304, whether or not to approve the target employee's use of the POS terminal based on the displayed information.

[0068] Next, a description will be given of the functions of the POS terminal 50. The control unit 501 of the POS terminal 50 loads a control program 511 stored in the storage unit 502 into the RAM, and generates each functional unit in the RAM by operating according to the control program 511. Specifically, the control unit 501 of the POS terminal 50 includes, as functional units, a communication control unit 5001, an operation control unit 5002, a sign-in execution unit 5003, a display control unit 5004, and an execution control unit 5005.

[0069] The communication control unit 5001 controls the communication interface 503 to communicate with the authentication server 10 and the like. For example, when a sign-in execution unit 5003 described below generates a sign-in request, the communication control unit 5001 transmits the sign-in request including the input contents to the authentication server 10. In addition, the communication control unit 5001 receives a response notification to the sign-in request from the authentication server 10.

[0070] The operation control unit 5002 controls the operation unit 504 to receive an operation input. Furthermore, the operation control unit 5002 controls a touch panel stacked on the first display unit 505 and a touch panel stacked on the second display unit 506 to receive an operation input.

[0071] For example, the operation control unit 5002 accepts an operation to activate a function of the POS terminal 50. The operation control unit 5002 also accepts an operation to input an employee code and a password in a sign-in request. Note that the employee code and the password in the sign-in request may be inputted not only by the operation control unit 5002 but also by the scanner 509 or the like reading a code symbol or the like.

[0072] The sign-in execution unit 5003 executes processing related to signing in. For example, when the operation control unit 5002 accepts an operation to input an employee code or a password in a sign-in request, the sign-in execution unit 5003 generates a sign-in request including the input contents.

[0073] Also, for example, the sign-in execution unit 5003 executes sign-in based on the use permission notification received by the communication control unit 5001. That is, when the use permission notification is received by the communication control unit 5001 from the authentication server 10, the sign-in execution unit 5003 permits use of the POS terminal 50.

[0074] The display control unit 5004 controls the first display unit 505 to display various screens. For example, when the communication control unit 5001 receives authentication failure information from the authentication server 10, the display control unit 5004 causes the first display unit 505 to display a message indicating that at least one of the employee code and the password does not match the information in the employee master 108.

[0075] Also, for example, when the communication control unit 5001 receives a use refusal notification from the authentication server 10, the display control unit 5004 causes the first display unit 505 to display a message indicating that the approver has not permitted use of the POS terminal 50.

[0076] The execution control unit 5005 executes a function of the POS terminal 50. When the operation control unit 5002 accepts an operation to activate a function of the POS terminal 50, the execution control unit 5005 determines whether or not the employee has the authority to execute the function.

[0077] That is, the execution control unit 5005 extracts the authority rank associated with the function code of the function to be started from the execution authority master 512. Then, the execution control unit 5005 determines that the signed-in employee has the authority to execute the function if the authority rank of the signed-in employee is equal to or lower than the authority rank extracted from the execution authority master 512. Then, when the execution control unit 5005 determines that the signed-in employee has the authority to execute the function, it executes the function.

[0078] Next, a description will be given of the processing executed by the authentication server 10. Here, Fig. 9 is a flowchart showing an example of the processing executed by the authentication server 10 according to the present embodiment.

[0079] First, the communication control unit 1001 receives a sign-in request (step S101). For example, the communication control unit 1001 controls the communication interface 103 to receive the sign-in request including an employee code and a password from the POS terminal 50.

[0080] Next, the authentication unit 1002 determines whether the password (indicated as PW in the figure) matches the registered information (step S102). For example, the authentication unit 1002 refers to the employee master 108 in the storage unit 102 and determines whether the employee code and password included in the sign-in request received in step S101 match the information registered in the employee master 108.

[0081] If the passwords do not match (step S102: No), the authentication unit 1002 generates authentication failure information (step S107). Next, the communication control unit 1001 transmits the authentication failure information (step S110) and ends this process. For example, the communication control unit 1001 controls the communication interface 103 to transmit the authentication failure information generated in step S109 to the POS terminal 50.

[0082] On the other hand, if the passwords match (step S102: Yes), the acquisition unit 1003 acquires the location information of the target employee (step S103).

[0083] For example, the acquisition unit 1003 acquires multiple images captured by the network camera 70 from the network camera 70 via the communication interface 103. The acquisition unit 1003 also extracts images showing the target employee from the multiple acquired images using known image recognition technology, etc. The acquisition unit 1003 acquires location information indicating the shooting position of the network camera 70 recorded in the extracted image as location information of the target employee.

[0084] Next, the approval request unit 1004 generates an approval request (step S104). For example, the approval request unit 1004 identifies the name of the target employee from the employee code included in the sign-in request received in step S101 and the employee master 108. The approval request unit 1004 generates an approval request including the employee code of the target employee, the name of the target employee, the location information of the target employee acquired in step S103, and the time when the location information was acquired.

[0085] Next, the communication control unit 1001 transmits an approval request (step S105). For example, the communication control unit 1001 controls the communication interface 103 to transmit the approval request generated in step S104 to the approver terminal 30. The communication control unit 1001 also receives a response notification to the approval request from the approver terminal 30.

[0086] Next, the generation unit 1005 determines whether the sign-in request has been approved by the approver (step S106). For example, when an approval notice is received by the communication control unit 1001, the generation unit 1005 determines that the sign-in request has been approved by the approver. On the other hand, when an approval disapproval notice is received by the communication control unit 1001, the generation unit 1005 determines that the sign-in request has not been approved by the approver.

[0087] If the sign-in request is approved (step S106: Yes), the generation unit 1005 generates a use permission notification as a response notification to the sign-in request (step S108). On the other hand, if the sign-in request is not approved (step S106: No), the generation unit 1005 generates a use refusal notification as a response notification to the sign-in request (step S109).

[0088] Next, the communication control unit 1001 transmits a response notification (step S111) and ends this process. For example, the communication control unit 1001 controls the communication interface 103 to transmit the use permission notification generated in step S108 or the use refusal notification generated in step S109 to the POS terminal 50.

[0089] As described above, the authentication server 10 according to this embodiment acquires the employee's location information when there is a sign-in request to the POS terminal 50. Furthermore, when the sign-in request is approved based on the employee's location information, the authentication server 10 according to this embodiment notifies the POS terminal 50 that the device usage restriction will be lifted.

[0090] As a result, for example, the sign-in request cannot be approved when the employee related to the sign-in request is not near the POS terminal 50. Therefore, even if a malicious person steals the sign-in information of an employee, the person can be prevented from using the POS terminal 50. In other words, the authentication server 10 according to this embodiment can improve the security of the POS terminal 50.

[0091] The above-described embodiment can be modified as appropriate by partially changing the configuration or function of each device of the POS system 1. Therefore, some modified examples of the above-described embodiment will be described below as other embodiments. The following mainly describes the differences from the above-described embodiment, and a detailed description of the commonalities with the contents already described will be omitted. The modified examples described below may be implemented individually or in appropriate combination.

[0092] (Variation 1) In the above embodiment, the additional information is the position information of the target employee. In this modified example, the additional information is a face image of the target worker.

[0093] In this modification, the POS terminal 50 has a camera. For example, the camera is provided near the first display unit 505. The camera captures a facial image of a person who uses the POS terminal 50.

[0094] In this modified example, when the operation control unit 5002 accepts input of an employee code and a password, the display control unit 5004 causes the first display unit 505 to display a message urging the person who input the employee code and password to take a face image and a screen for taking a face image. The time when the face image was taken is recorded in the taken face image.

[0095] The sign-in execution unit 5003 generates a sign-in request including an employee code, a password, and a captured face image. The communication control unit 5001 then controls the communication interface 503 to transmit the sign-in request generated by the sign-in execution unit 5003 to the authentication server 10.

[0096] In this modification, the acquisition unit 1003 of the authentication server 10 acquires a facial image included in the sign-in request as additional information. The approval request unit 1004 generates an approval request including the employee code, the name of the specified employee, the facial image of the target employee acquired by the acquisition unit 1003, and the time the facial image was taken.

[0097] According to this modification, the approval request includes a facial image of the person who made the sign-in request, so the approver can determine whether to approve the request after viewing the facial image. Therefore, for example, if a non-employee makes a sign-in request, the approver can refuse the person's use of the POS terminal 50. In other words, according to this modification, the security of the POS terminal 50 can be improved.

[0098] (Variation 2) In the above embodiment, the additional information is the location information of the target employee. In this modified example, the additional information is voice data that records the voice of the target worker.

[0099] In this modification, the POS terminal 50 has a microphone. For example, the microphone is provided near the first display unit 505. The microphone is used to record the voice of the person using the POS terminal 50.

[0100] In this modified example, when the operation control unit 5002 receives an input of an employee code and a password, the display control unit 5004 displays a message prompting the person who input the employee code and password to record a voice on the first display unit 505. The recorded voice data includes the recording time of the voice data.

[0101] The sign-in execution unit 5003 generates a sign-in request including the employee code, the password, and the recorded voice data. The communication control unit 5001 then controls the communication interface 503 to transmit the sign-in request generated by the sign-in execution unit 5003 to the authentication server 10.

[0102] In this modification, the acquisition unit 1003 of the authentication server 10 acquires the voice data included in the sign-in request as additional information. The approval request unit 1004 generates an approval request including the employee code, the name of the specified employee, the voice data of the target employee acquired by the acquisition unit 1003, and the recording time of the voice data.

[0103] According to this modification, the approval request includes voice data of the person who made the sign-in request, so the approver can determine whether to approve the request after listening to the voice data. Therefore, for example, if a non-employee makes a sign-in request, the approver can deny the person's use of the POS terminal 50. In other words, according to this modification, the security of the POS terminal 50 can be improved.

[0104] (Variation 3) In the above embodiment, a description has been given of a configuration in which the authentication server 10 transmits an approval request to the approver terminal 30, and the approver determines whether to approve the sign-in request via the approver terminal 30. In this modified example, a description will be given of a configuration in which the authentication server 10 automatically determines whether to approve the sign-in request.

[0105] In this modified example, the POS system 1 does not have an approver terminal 30. Also, the authentication server 10 has an approval unit 3003 of the approver terminal 30 as a functional unit. For example, when the additional information is location information of the target employee, the approval unit 3003 determines whether the location information of the target employee acquired by the acquisition unit 1003 indicates the vicinity where the POS terminal 50 is installed.

[0106] The approval unit 3003 determines to approve the sign-in request when the location information of the target employee indicates the vicinity where the POS terminal 50 is installed. On the other hand, the approval unit 3003 determines not to approve the sign-in request when the location information of the target employee does not indicate the vicinity where the POS terminal 50 is installed.

[0107] Furthermore, for example, when the additional information is a facial image of the target employee, the approval unit 3003 uses known image recognition technology or the like to determine whether the facial image of the target employee acquired by the acquisition unit 1003 matches the facial image of the employee registered in advance in the employee master 108 or the like.

[0108] The approval unit 3003 determines to approve the sign-in request when the facial image of the target employee matches a facial image registered in advance. On the other hand, the approval unit 3003 determines not to approve the sign-in request when the facial image of the target employee does not match a facial image registered in advance.

[0109] Furthermore, for example, when the additional information is voice data of the target employee, the approval unit 3003 uses known voice recognition technology or the like to determine whether the voice data of the target employee acquired by the acquisition unit 1003 matches the voice data of the employee registered in advance in the employee master 108 or the like.

[0110] The approval unit 3003 determines to approve the sign-in request when the voice data of the target employee matches the pre-registered voice data. On the other hand, the approval unit 3003 determines not to approve the sign-in request when the voice data of the target employee does not match the pre-registered voice data.

[0111] Furthermore, in this modification, the generation unit 1005 generates a use permission notification or a use refusal notification depending on the result of the determination of whether or not to approve the sign-in request by the approval unit 3003. For example, when the approval unit 3003 determines that the sign-in request is to be approved, the generation unit 1005 generates a use permission notification. On the other hand, when the approval unit 3003 determines that the sign-in request is not to be approved, the generation unit 1005 generates a use refusal notification.

[0112] According to this modification, the sign-in request is automatically approved based on the additional information, which reduces the workload of the store manager and the like.

[0113] The programs executed by each device in the above-mentioned embodiments and modifications are provided by being pre-installed in a storage medium (ROM or storage unit) included in each device, but this is not limited to the above. For example, the programs may be provided by being recorded in an installable or executable format on a computer-readable storage medium such as a CD-ROM, a flexible disk (FD), a CD-R, or a DVD (Digital Versatile Disk). Furthermore, the storage medium is not limited to a medium independent of the computer or embedded system, but also includes a storage medium in which a program transmitted via a LAN, the Internet, or the like is downloaded and stored or temporarily stored.

[0114] In addition, the programs executed by each device in the above embodiments and modified examples may be stored on a computer connected to a network such as the Internet and provided by downloading them via the network, or may be provided or distributed via a network such as the Internet.

[0115] Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and spirit of the invention, and are included in the scope of the invention and its equivalents described in the claims. [Explanation of symbols]

[0116] 1. POS System 10 Authentication Server 30 Approver terminal 50 POS terminals 108 Employee Master 308 Store Employee Master 512 Execution authority master 1001 Communication control unit 1002 Authentication Department 1003 Acquisition Department 1004 Approval request section 1005 Generation part 3001 Communication control section 3002 Operation control section 3003 Approval Department 3004 Display control unit 5001 Communication control section 5002 Operation control section 5003 Sign-in execution unit 5004 Display control unit 5005 Execution Control Unit [Prior art documents] [Patent documents]

[0117] [Patent Document 1] Patent Publication No. 2021-15408

Claims

1. a reception unit that receives an instruction from an employee to start using a device that is restricted in use; an acquisition unit that acquires additional information related to the employee when the instruction to start using the system is received; a release unit that releases the usage restriction of the device when the employee is recognized as a person who is permitted to use the device based on the acquired additional information; An information processing device comprising:

2. The reception unit receives input of identification information and a password of the employee when receiving the instruction to start using the device, an authentication unit that determines whether the identification information and the password match a predetermined set of the identification information and the password; the acquiring unit acquires the additional information only when the authentication unit determines that the identification information and the password match a predetermined set of the identification information and the password. The information processing device according to claim 1 .

3. an approval request unit that generates an approval request including the identification information and the additional information received by the reception unit when the additional information is acquired by the acquisition unit; a transmitting unit for transmitting the approval request to an approver terminal used by an approver who approves the release of the usage restriction of the device; a receiving unit for receiving a response to the approval request based on the additional information; and a determination unit that determines whether the employee is authorized to use the device in response to the response. The information processing device according to claim 2 .

4. The acquisition unit acquires, as the additional information, location information indicating a location within the store of an employee related to the usage start instruction. The information processing device according to claim 1 .

5. The acquisition unit acquires a facial image of the employee related to the start-of-use instruction as the additional information. The information processing device according to claim 1 .

6. The acquisition unit acquires voice data of an employee related to the start-of-use instruction as the additional information. The information processing device according to claim 1 .

7. Computer, a reception unit that receives an instruction from an employee to start using a device that is restricted in use; an acquisition unit that acquires additional information related to the employee when the instruction to start using the system is received; a release unit that releases the usage restriction of the device when the employee is recognized as a person who is permitted to use the device based on the acquired additional information; A program that functions as a

Images