Information processing system, information processing method, and program

The information processing system synchronizes device data across ledgers, improving data management efficiency by minimizing redundant recording and enhancing integration across management systems.

JP2025119711APending Publication Date: 2025-08-15MONEY FORWARD INC
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
JP2024014652
Authority / Receiving Office
JP · JP
Patent Type
Applications
Current Assignee / Owner
Filing Date
2024-02-02
Publication Date
2025-08-15

AI Technical Summary

Technical Problem

There is a need for more efficient management of device-related data in organizations.

Method used

An information processing system that includes processors to acquire and output device data from one ledger to another, allowing for synchronization and reflection of data across multiple device ledgers, thereby reducing the effort required to manage device data separately in each ledger.

Benefits of technology

Enables more efficient management of device-related data by reducing the need for separate recording and enhancing integration of device data across different management systems.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 2025119711000001_ABST
    Figure 2025119711000001_ABST
Patent Text Reader

Abstract

To provide a technology capable of efficiently managing the data related to devices.SOLUTION: One aspect of the present invention provides an information processing system with one or more processors to execute the following each step. An acquisition step in this information processing system acquires first device data recorded in a first device ledger. The device ledger records each device data by associating it with one or more devices and the device data is the data related to the devices. An output step outputs so that the first device data is reflected in the item recorded in the ledger of the second device corresponding to the first device data accepted as the input.SELECTED DRAWING: Figure 1
Need to check novelty before this filing date? Find Prior Art

Description

[Technical Field]

[0001] The present invention relates to an information processing system, an information processing method, and a program. [Background technology]

[0002] Conventionally, a technology has been disclosed that can provide a system and method for discovering the use of applications in a computing environment and managing access to the applications in order to minimize security threats and risks in the computing environment of an organization (Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-050462 Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, there has been a demand for technology that allows for more efficient management of device-related data.

[0005] In view of the above circumstances, the present invention provides a technique that enables more efficient management of device-related data. [Means for solving the problem]

[0006] According to one aspect of the present invention, there is provided an information processing system including one or more processors that execute the following steps: In the acquisition step in this information processing system, first device data recorded in a first device ledger is acquired. The device ledger records device data associated with one or more devices, and the device data is data related to the devices. In the output step, the first device data is output so that it is reflected in an item recorded in a second device ledger that corresponds to the first device data that has been received as input.

[0007] According to the present disclosure, it is possible to provide a technique that enables more efficient management of data related to devices. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a diagram illustrating an example of a system configuration of an information processing system 1. FIG. [Figure 2] FIG. 2 is a diagram illustrating an example of a hardware configuration of a first server device 2. [Figure 3] FIG. 2 is a diagram illustrating an example of a hardware configuration of a second server device 3. [Figure 4] FIG. 2 is a diagram illustrating an example of a hardware configuration of an administrator device 5. [Figure 5] FIG. 2 is a diagram illustrating an example of functional units included in a processor 21. [Figure 6] FIG. 2 is a diagram illustrating an example of functional units included in a processor 31. [Figure 7] FIG. 10 is a sequence diagram illustrating an example of an overall information process according to the embodiment. [Figure 8] FIG. 10 is a diagram illustrating an example of information processing related to reflecting data in a device ledger and kitting. DETAILED DESCRIPTION OF THE INVENTION

[0009] [Embodiment] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the accompanying drawings. Various features shown in the following embodiments can be combined with each other.

[0010] 1. Definitions The program for realizing the software appearing in this embodiment may be provided as a non-transitory computer-readable medium, or may be provided so that it can be downloaded from an external server, or may be provided so that the program is started on an external computer and its functions are realized on a client device (so-called cloud computing).

[0011] In this embodiment, the term "unit" may include, for example, a combination of hardware resources implemented by a circuit in the broad sense and software information processing that can be specifically realized by these hardware resources. Furthermore, this embodiment handles various types of information, which may be represented by, for example, physical values of signal values representing voltages and currents, high and low signal values as a binary bit set consisting of 0 or 1, or quantum superposition (so-called quantum bits), and communication and calculations may be performed on the circuit in the broad sense.

[0012] In a broad sense, a circuit is a circuit realized by at least an appropriate combination of a circuit, circuitry, a processor, a memory, etc. That is, a circuit includes an application specific integrated circuit (ASIC), a programmable logic device (e.g., a simple programmable logic device (SPLD), a complex programmable logic device (CPLD), and a field programmable gate array (FPGA)), etc. The circuit also includes a serverless architecture that uses container-based services to run applications in an environment abstracted from the management of physical infrastructure.

[0013] A "device ledger" is a ledger in which device data associated with one or more devices is recorded. In this specification, the first device ledger, second device ledger, and third device ledger each correspond to a device ledger. The first device ledger, for example, records first device data associated with each of the multiple employee devices 6-1, 6-2, 6-3, . . . , 6-n. The second device ledger, for example, records second device data associated with each of the multiple employee devices 6-1, 6-2, 6-3, . . . , 6-n. The third device ledger, for example, records third device data associated with each of the multiple employee devices 6-1, 6-2, 6-3, . . . , 6-n.

[0014] "Device data" refers to data related to a device. Device data includes employee ledger data, which will be described later. Device data may include, for example, a device serial number, a device type (smartphone, PC, etc.), an employee's username, an employee's name, an employee's email address, a device phone number, an employee's position within an organization (job title, duties, responsibilities, rank, whether the employee is an executive, etc.), an employee's department within an organization, an employee's work location, a device purchase number, a device purchase date, a device warranty expiration date, a device purchase price, a device useful life, a device lease expiration date, device location data, device status data, and device custom property data.

[0015] "Employee ledger data" refers to data specific to an employee that can identify an employee within an organization, or data on device usage within an organization. Employee-specific data that can identify an employee within an organization may include data such as the employee's username, employee name, employee email address, employee phone number, employee's position within the organization, employee's department within the organization, and employee's work location. Employee-specific data that can identify an employee within an organization may be data that identifies an employee within an organization by combining multiple device data. Device usage data within an organization may include device location data, device status data, device custom property data, data on the type of tool being used, device usage history data, and the like. Device location data is data indicating the location of the device and may be data obtained using a GPS within the device. Device status data is data indicating the current usage status of the device and may be data indicating, for example, "unused," "in use," "discontinued," "discarded," "maintenance," and the like. Device custom property data indicates values assigned to devices, and may include, for example, data such as the device's management number (a number used for internal management within an organization), keyboard type (en or jis), and remaining battery life. Device custom property data may also include account data for linked cloud storage services (e.g., iCloud, Google Drive, OneDrive, Dropbox). Data on the type of tool used indicates, for example, Google, Slack, Microsoft 365, etc. Device usage history data indicates which device was owned or used for how long (e.g., from when to when), and may indicate, for example, that "Employee A used Smartphone A from March 2023 to January 2024."

[0016] A "management system" is a system that manages devices using at least a device ledger. In this specification, a first management system that manages a first device ledger, a second management system that manages a second device ledger, and a third management system that manages a third device ledger each qualify as a management system. The authority to edit data in the device ledger preferably lies with the management system that manages that device ledger, but is not limited to this. Furthermore, when one management system manages another management system, the one management system may edit the device ledger managed by the other management system or execute functions available in the other management system. In this specification, the first management system is described as managing the second management system and the third management system, but is not limited to this. The management system may be configured to perform kitting and / or endpoint management. For example, in this specification, the second management system is described as being configured to perform both kitting and endpoint management.

[0017] An "organization" is a group that aims to achieve a specific purpose. An organization may include, for example, a joint stock company, a limited liability company, a limited partnership, a general incorporated association, a general incorporated foundation, a public interest incorporated association or public interest incorporated foundation, an NPO, or a union. Furthermore, if the organization is a company, for example, the organization may include group companies, affiliated companies, related companies, parent companies, and subsidiaries.

[0018] An "employee" is a natural person who belongs to an organization. For example, a natural person who belongs to a subsidiary of a corporation may be considered to belong to the corporation. In this specification, an employee may also include a natural person who has been loaned or transferred an employee device from an organization. For example, if the natural person has been loaned or transferred an employee device, the employee may also include a part-time worker, a customer, a person working on a contract basis, etc.

[0019] The term "acquire" may be a concept that includes both receiving data etc. from another device and generating data etc. by oneself.

[0020] 2. System Configuration First, the system configuration of an information processing system 1 of this embodiment will be described with reference to FIG.

[0021] FIG. 1 is a diagram illustrating an example of the system configuration of an information processing system 1. As illustrated in FIG. 1, the information processing system 1 includes a first server device 2, a second server device 3, a third server device 4, an administrator device 5, multiple employee devices 6-1, 6-2, 6-3, . . . , 6-n (employee device 6 refers to any one employee device), and a network N. Although not illustrated, the first server device 2, the second server device 3, and the third server device 4 may each be configured with multiple information processing devices or with a single information processing device. Here, the system exemplified by the information processing system 1 is composed of one or more devices or components. Therefore, the system exemplified by the information processing system 1 includes the first server device 2 alone, the second server device 3 alone, the third server device 4 alone, the administrator device 5 alone, or the employee device 6 alone.

[0022] The first server device 2 is a server that manages a first device ledger. As shown by the area defined by the dotted line in FIG. 1 , the first management system may be configured to include the second management system and / or the third management system by managing the second management system and the third management system. That is, the first management system may be considered to include the first server device 2, the second server device 3, the third server device 4, the administrator device 5, and multiple employee devices 6-1, 6-2, 6-3, . . . , 6-n. The first server device 2 may be a system configured to be able to perform mobile device management (MDM). The first management system may be a system configured to be able to perform inventory management (IT asset management). Furthermore, the first server device 2 may be configured to be able to detect services (including shadow IT) used within the organization by analyzing data acquired from servers used within the organization, such as email servers, accounting service servers, expense claim service servers, and banking service servers. In this case, the first server device 2 may be configured to be able to manage information about the detected services and / or to be able to execute functions of the detected services. The second management system and the third management system may be included in the services detected by the first server device 2.

[0023] The first device ledger does not need to be stored in the first server device 2 (storage unit 22 described later) and may be stored in an external storage unit. The same applies to the second device ledger and the third device ledger described later.

[0024] The second server device 3 is a server that manages a second device ledger. As shown by the area defined by the dashed lines in FIG. 1, the second management system includes the second server device 3 and multiple employee devices 6-1, 6-2, 6-3, . . . , 6-n. The second management system may be a system configured to be able to perform inventory management (IT asset management). The second management system may be a system configured to be able to perform MDM and may have a function for end-point management of one or more devices. If the second management system has end-point management, the second management system has the end-point management function for devices linked to the first device data reflected from the first device ledger in the second device ledger, thereby enabling more efficient management of device data and management of the devices themselves.

[0025] The third server device 4 is a server that manages a third device ledger. As shown by the area defined by the dashed dotted line in Figure 1, the third management system includes the third server device 4 and multiple employee devices 6-1, 6-2, 6-3, ..., 6-n. The third management system may also be a system configured to be able to perform inventory management (IT asset management) and / or MDM.

[0026] The administrator device 5 is a device used by a user as an administrator. The administrator is a user who operates the information processing system 1 and may be included in the employees. The employee device 6 is a device used by a user as an employee of the organization. The administrator device 5 and the employee device 6 may be any of a PC (Personal Computer), a tablet computer, a smartphone, etc.

[0027] The network N enables the first server device 2, the second server device 3, the third server device 4, the administrator device 5, and the multiple employee devices 6-1, 6-2, 6-3, ..., 6-n to communicate with each other. The network N may be wireless communication using the Internet, but is not limited to this and may also be wired communication.

[0028] 3. Hardware Configuration Next, the hardware configurations of the first server device 2, the second server device 3, the third server device 4, the administrator device 5, and the employee device 6 of this embodiment will be described with reference to FIGS.

[0029] 3.1. Hardware Configuration of First Server Device 2 Fig. 2 is a diagram showing an example of the hardware configuration of the first server device 2. As shown in Fig. 2, the first server device 2 includes a processor 21, a storage unit 22, and a communication unit 23, and these components are electrically connected via a communication bus inside the first server device 2. The first server device 2 executes the processing according to the embodiment.

[0030] The processor 21 processes and controls the overall operations related to the first server device 2. The processor 21 is, for example, a central processing unit (CPU). The processor 21 reads out a predetermined program stored in the storage unit 22 and executes processing based on the program, thereby realizing various functions related to the first server device 2, for example, the processing shown in FIGS. 7 and 8 described below. The processor 21 is not limited to being single, and multiple processors 21 may be provided for each function. Alternatively, a combination of these may be used.

[0031] The storage unit 22 stores various pieces of information defined above. This can be implemented, for example, as a storage device such as a solid state drive (SSD) that stores various programs and the like related to the first server device 2 executed by the processor 21, or as a memory such as a random access memory (RAM) that stores temporarily required information (arguments, arrays, etc.) related to the program operations. The storage unit 22 stores various programs and variables related to the first server device 2 executed by the processor 21, as well as data and the like used when the processor 21 executes processing based on the programs. The storage unit 22 is an example of a storage medium.

[0032] The communication unit 23 is preferably a wired communication means such as USB, IEEE1394, Thunderbolt (registered trademark), wired LAN network communication, etc., but may also include wireless LAN network communication, mobile communication such as LTE / 3G / 4G / 5G, BLUETOOTH (registered trademark) communication, etc. as necessary. In other words, it is more preferable to implement it as a collection of multiple communication means. In other words, the first server device 2 may communicate various information from the outside via the communication unit 23.

[0033] 3.2. Hardware Configuration of Second Server Device 3 FIG. 3 is a diagram illustrating an example of the hardware configuration of the second server device 3. As illustrated in FIG. 3, the second server device 3 includes a processor, a storage unit, and a communication unit. The components of the second server device 3 are electrically connected via a communication bus inside the second server device 3. The second server device 3 executes the processing according to the embodiment. For the processor 31, storage unit 32, and communication unit 33 of the second server device 3, please refer to the processor 21, storage unit 22, and communication unit 23 of the first server device 2.

[0034] 3.3. Hardware Configuration of Third Server Device 4 The third server device 4 includes a processor, a storage unit, and a communication unit. The components of the third server device 4 are electrically connected via a communication bus within the third server device 4. The third server device 4 executes the processing according to the embodiment. For the processor, storage unit, and communication unit of the third server device 4, please refer to the processor 21, storage unit 22, and communication unit 23 of the first server device 2.

[0035] 3.4. Hardware configuration of administrator device 5 4 is a diagram illustrating an example of the hardware configuration of the administrator device 5. As illustrated in FIG. 4, the administrator device 5 includes a processor 51, a storage unit 52, a communication unit 53, an input unit 54, and an output unit 55, and these components are electrically connected via a communication bus inside the administrator device 5. The administrator device 5 executes the processing according to the embodiment. For the processor 51, storage unit 52, and communication unit 53 of the administrator device 5, please refer to the processor 21, storage unit 22, and communication unit 23 of the first server apparatus 2.

[0036] The input unit 54 may be included in the housing of the administrator device 5 or may be externally attached. For example, the input unit 54 may be implemented as a touch panel integrated with the output unit 55. A touch panel allows a user to input tapping, swiping, and the like. Of course, a switch button, a mouse, a QWERTY keyboard, or the like may be used instead of a touch panel. That is, the input unit 54 accepts an input based on an operation performed by the user. The input is transferred as a command signal to the processor 51 via a communication bus, and the processor 51 can execute predetermined control or calculation as necessary.

[0037] The output unit 55 can function as a display device for the administrator device 5. The output unit 55 may be included in the housing of the administrator device 5 or may be externally attached. The output unit 55 displays a graphical user interface (GUI) screen that can be operated by the user. This is preferably implemented by selectively using display devices such as a CRT display, a liquid crystal display, an organic EL display, and a plasma display depending on the type of administrator device 5.

[0038] 3.5. Employee Device 6 Hardware Configuration The employee device 6 has a processor, a memory unit, a communication unit, an input unit, and an output unit, and these components are electrically connected via a communication bus inside the employee device 6. The employee device 6 executes the processing according to the embodiment. For the processor, memory unit, and communication unit of the employee device 6, please refer to the processor 21, memory unit 22, and communication unit 23 of the first server device 2. For the input unit and output unit of the employee device 6, please refer to the input unit 54 and output unit 55 of the administrator device 5.

[0039] 4. Processor Functional Configuration Next, the functional configuration of each processor will be described with reference to Figures 5 and 6. Here, only the functional configuration of processor 21 and processor 31 will be described, but for the other processors (the processor of the third server device 4, the processor 51 of the administrator device 5, and the processor of the employee device 6), information processing by software stored in each memory unit can be similarly realized by the processor, which is an example of hardware, and executed as each functional unit included in the processor.

[0040] 4.1. Functional Configuration of Processor 21 Fig. 5 is a diagram illustrating an example of functional units included in the processor 21. As illustrated in Fig. 5, the processor 21 executes various programs stored in the storage unit 22 to function as an information acquisition unit 210, an information output unit 211, and a management unit 212. That is, information processing by software stored in the storage unit 22 is specifically realized by the processor 21, which is an example of hardware, and can be executed as each functional unit included in the processor 21.

[0041] The information acquisition unit 210 is configured to accept, receive, or acquire various pieces of information via the network N and the communication unit 23.

[0042] The information output unit 211 is configured to output various pieces of information via the communication unit 23 and the network N.

[0043] The management unit 212 is configured to control other systems (including individual devices) and manage various data.

[0044] The information acquisition unit 210, the information output unit 211, and the management unit 212 will be described in detail later.

[0045] 4.2. Functional Configuration of Processor 31 6 is a diagram illustrating an example of functional units included in processor 31. As illustrated in Fig. 6, processor 31 executes various programs stored in storage unit 32 to function as information acquisition unit 310, information output unit 311, management unit 312, and kitting unit 313. That is, information processing by software stored in storage unit 22 is specifically realized by processor 21, which is an example of hardware, and can be executed as each functional unit included in processor 21. Information acquisition unit 310, information output unit 311, and management unit 312 may have the same functions as information acquisition unit 210, information output unit 211, and management unit 212, respectively.

[0046] The management unit 312 is configured to control other systems (including individual devices) and manage various data. The management unit 312 is also configured to be able to perform endpoint management of the employee devices 6.

[0047] The kitting unit 313 is configured to be able to perform kitting of the employee device 6.

[0048] 5. Information Processing Hereinafter, an example of preferable information processing executed by the information processing system 1 of this embodiment will be described. Fig. 7 is a sequence diagram showing an example of the overall information processing according to this embodiment.

[0049] In this specification, various information transmitted and received via the communication unit 23, the communication unit 33, the communication unit of the third server device 4, the communication unit of the administrator device 5, or the communication unit of the employee device 6 may be stored in a storage unit within the device having the used communication unit. For example, when the communication unit 23 is used to transmit and receive information, the transmitted and received information may be stored in the storage unit 22.

[0050] [Sequence S1] First, the processor 51 of the administrator device 5 accepts input of second device data via an operation on the input unit 54 by the administrator. The processor 51 transmits the accepted input second device data to the second server device 3 via the communication unit 53 and the network N. The information acquisition unit 310 of the second server device 3 acquires the second device data recorded in the second device ledger from the administrator device 5. The management unit 312 manages the accepted second device data so that it is reflected in the second device ledger.

[0051] [Sequence S2] Next, the information output unit 311 outputs the second device data to the items recorded in the first device ledger that correspond to the second device data recorded in the second device ledger so that the second device data is reflected in the items. The information acquisition unit 210 acquires the instruction from the second server apparatus 3. Based on the instruction, the management unit 212 outputs and manages the second device data included in the second device ledger so that the second device data is reflected in the first device ledger as the first device data. Sequence S2 may be performed after execution of sequence S1, may be performed in response to an instruction from the administrator, or may be performed at any predetermined timing. With this configuration, the second device data recorded in the second device ledger can also be reflected in the first device ledger, thereby reducing the effort of separately recording device data in each ledger.

[0052] "Items recorded in one device ledger that correspond to device data recorded in the other device ledger" are items that can be considered to be substantially the same between one device ledger and the other device. For example, an item managed as "email address" in one device ledger and an item managed as "email address (PC)" in the other device ledger may be considered to be the same, but this is not limiting. Whether they are the same or not may be set arbitrarily.

[0053] "Outputting data so that it reflects the data" may mean synchronizing the data recorded in one device ledger with the data recorded in the other device ledger so that they match, or outputting data recorded in one device ledger that is not recorded in the other device ledger so that it is added to and recorded in the other device ledger. The notation method used when outputting data so that it reflects the data does not need to be the same between the output source and the output destination, and may be changed depending on the notation method used in the output destination device ledger. For example, differences such as "2024" and "Reiwa 6" or "Minato Ward, Tokyo, Japan" and "Minato Ward, Tokyo" may be changed as necessary.

[0054] Each of the above-described sequences S1 to S2 may be executed at any timing, or may be executed after any of the information processing of sequences S3 to S7 described below. Furthermore, each of sequences S1 to S2 may be omitted. Sequence S2 is information processing from the second server device 3 to the first server device 2, but it may also be executed similarly from the third server device 4 to the first server device 2. That is, the processor 41 of the third server device 4 may output the third device data so that the third device data is reflected in the items recorded in the first device ledger that correspond to the third device data recorded in the third device ledger.

[0055] [Sequence S3] Next, the processor 51 of the administrator device 5 accepts input of first device data via an operation on the input unit 54 by the administrator. The processor 51 transmits the accepted input first device data to the first server device 2 via the communication unit 53 and the network N. The information acquisition unit 210 of the first server device 2 acquires the first device data recorded in the first device ledger from the administrator device 5. The management unit 212 manages the accepted first device data so that it is reflected in the first device ledger.

[0056] [Sequence S4] Next, the information output unit 211 outputs the first device data so that the first device data is reflected in the item recorded in the second device ledger that corresponds to the received input of the first device data. The information acquisition unit 310 acquires the instruction from the first server apparatus 2. Based on the instruction, the management unit 312 outputs and manages the first device data included in the first device ledger so that the first device data is reflected in the second device ledger as second device data. With this configuration, the device data recorded in the first device ledger can be reflected in the second device ledger, thereby reducing the effort required to record device data separately in each ledger.

[0057] [Sequence S5] Next, the information output unit 211 outputs an instruction to the third management system to reflect the first device data in an item recorded in a third device ledger that is different from the second device ledger and that corresponds to the received first device data. The processor of the third server device 4 acquires the instruction from the first server device 2. Based on the instruction, the processor outputs and manages the first device data included in the first device ledger so that the first device data is reflected in the third device ledger as third device data. With this configuration, the first device data recorded in the first device ledger can also be reflected in the third device ledger, thereby reducing the effort required to record device data separately in multiple ledgers.

[0058] Sequences S4 and S5 may be performed simultaneously or separately, or one information processing may be performed after the other information processing. Sequences S4 and S5 may be performed after sequence S3 is executed, or may be performed in response to an instruction from an administrator, or may be performed at any predetermined timing. Also, either sequence S4 or S5 may be omitted. Sequences S4 and S5 enable management of multiple management systems having device ledgers, thereby enabling more efficient integration of device data.

[0059] [Sequence S6] Next, the kitting unit 313 executes kitting for the device linked to the second device data. With this configuration, the second management system can execute kitting for the device linked to the first device data reflected in the second device ledger from the first device ledger, thereby enabling more efficient execution of kitting by the second management system.

[0060] "Kitting" refers to the work required to prepare a device for use within an organization. Kitting may be performed during initial device setup or after the device begins to be used. Examples of kitting include, but are not limited to, installing / updating the OS, configuring the network, installing / updating various drivers (for IoT devices including printers), installing / updating business applications, license authentication, configuring the OS, configuring applications, and applying security patches. The kitting content may be identified for each employee based on information included in employee ledger data. The kitting content may be identified for each employee based on information such as the employee's work location, affiliation, position, time of joining the company, user's email address, the user's department within the organization, and the user's location within the organization.

[0061] [Sequence S7] Finally, the management unit 312 executes endpoint management for devices linked to the second device data. With this configuration, the second management system can execute endpoint management for devices linked to the first device data reflected from the first device ledger in the second device ledger, thereby enabling the second management system to execute endpoint management more efficiently.

[0062] "Endpoint management" refers to the specific management or operation of devices connected to a network. Endpoint management may include security management or operation of devices, such as locking the device screen, changing password settings, deleting data from devices, etc. Endpoint management may also include the concept of Unified Endpoint Management (UEM).

[0063] Sequences S6 and S7 may be performed simultaneously or separately, or one information processing may be performed after the other. Sequences S6 and S7 may be performed after sequence S5 is executed, or may be performed in response to an instruction from an administrator, or may be performed at any predetermined timing. Also, either sequence S6 or S7 may be omitted.

[0064] 8 is a diagram showing an example of information processing related to reflecting data in the device ledger and kitting. In FIG. 8, the details of sequences S3, S4, and S6 described in FIG.

[0065] The information acquisition unit 210 of the first server device 2 acquires device data (which may include, for example, employee ledger data such as employee email address data, employee department data, employee location (including workplace) data (which may be device location data), and employee position within the organization) recorded in the first device ledger, input through a user's operation on the input unit 54 of the administrator device 5. The information output unit 211 identifies each item recorded in the second device ledger corresponding to the input-accepted device data (including the employee email address data, etc.). The information output unit 211 outputs an instruction to the second management system to the second server device 3 so that the device data (including the employee email address data, etc.) is reflected in the identified item of the device data (including the employee email address data, etc.).

[0066] The information acquisition unit 310 of the second server device 3 acquires the instruction from the first server device 2. Based on the instruction, the management unit 312 changes the device data (including the employee ledger data such as the employee's email address) to reflect it in the second device ledger as second device data, and manages the data. At this time, if data has been previously entered in an item corresponding to the employee's email address data, the data may be replaced.

[0067] The kitting unit 313 can specify the contents of kitting according to any data included in the employee ledger data. The determination of the contents of kitting may be performed by the processor 21 of the first server device 2 instead of the kitting unit 313. For example, the kitting unit 313 may identify the kitting content based on the employee's email address included in the employee ledger data, and more specifically, for example, if the employee linked to the email address uses company housing, the kitting unit 313 may install an application related to the use of company housing. For example, the kitting unit 313 may identify the kitting content based on the data of the employee's department contained in the employee ledger data, and more specifically, for example, may install an online conferencing application on the employee device of an employee in charge of sales. For example, the kitting unit 313 may determine the kitting content based on data on the employee's location (including place of work) contained in the employee ledger data, and more specifically, for example, may install a driver for a printer installed in the "Tokyo office" on the employee device of an employee working in the "Tokyo office." For example, the kitting unit 313 may identify the kitting content according to the employee's position within the organization, which is included in the employee ledger data, and more specifically, for example, may set different viewing permissions between employee devices of executives and employee devices of non-executives.

[0068] As described above, the present invention provides a technology that enables more efficient management of device-related data. Furthermore, with this configuration, there is no need for the administrator device 5 to issue information processing instructions to multiple servers, so the amount of information processing can be reduced compared to a method in which the administrator device 5 issues instructions to multiple servers. This reduces the load on the first server device 2, the second server device 3, and the third server device 4.

[0069] [others] The program may be a program that causes one or more computers to execute each functional unit (step). The information processing system 1 may include one or more computers that execute the program. With respect to the information processing system 1 according to the above-described embodiment, the program may be a program that causes a computer to function as a processor of the information processing system 1. It may also be an information processing method executed by the information processing system 1. The information processing method may include each functional unit (step) that is executed by one or more processors of the information processing system 1.

[0070] At least one of the devices included in the information processing system 1 may be installed outside Japan. For example, the first server device 2, the second server device 3, or the third server device 4 may be installed outside Japan, and each terminal device may be installed in Japan. Similarly, a user may use their own terminal device from outside Japan to access the first server device 2, the second server device 3, or the third server device 4 installed in Japan. According to such an embodiment, a more convenient experience can be provided to the user through various management modes.

[0071] The first server device 2, the second server device 3, or the third server device 4 may be on-premise or cloud-based. The first server device 2, the second server device 3, or the third server device 4 in cloud-based form may provide the above functions and processes in the form of, for example, SaaS (Software as a Service) or cloud computing.

[0072] In the above embodiment, the first server device 2, the second server device 3, or the third server device 4 performed various storage and control operations, but multiple external devices may be used instead of the first server device 2, the second server device 3, or the third server device 4. That is, various information and programs may be distributed and stored in multiple external devices using block chain technology or the like.

[0073] Furthermore, it may be provided in the following aspects.

[0074] (1) An information processing system having one or more processors that execute the following steps: in an acquisition step, first device data recorded in a first device ledger is acquired, the device ledger records device data associated with one or more devices, the device data being data related to the devices; and in an output step, the first device data is output so as to be reflected in an item recorded in a second device ledger that corresponds to the first device data that has been received as input.

[0075] With this configuration, the device data recorded in the first device ledger can be reflected in the second device ledger, thereby reducing the effort required to record the device data separately in each ledger.

[0076] (2) In the information processing system described in (1) above, the device data includes employee ledger data, and the employee ledger data is data specific to an employee that can identify an employee within an organization, or data on device usage within the organization.

[0077] This configuration can reduce the time and effort required to record employee ledger data separately in each ledger.

[0078] (3) In the information processing system described in (2) above, the second device ledger is managed by a second management system, second device data is recorded, and the second management system is configured to be able to perform kitting on devices linked to the second device data.

[0079] With this configuration, the second management system can perform kitting for devices linked to the first device data reflected from the first device ledger in the second device ledger, thereby enabling kitting by the second management system to be performed more efficiently.

[0080] (4) In the information processing system described in (3) above, the kitting content is identified for each employee based on at least one of the data included in the employee register data: the user's email address, the user's department within the organization, and the user's location within the organization.

[0081] With this configuration, the second management system identifies the kitting content based on the first device data reflected from the first device ledger to the second device ledger, thereby enabling the second management system to perform kitting more efficiently.

[0082] (5) In the information processing system described in any one of (2) to (4) above, in the output step, the first device data is output so as to be reflected in an item recorded in a third device ledger corresponding to the first device data received as input, and the third device ledger is different from the second device ledger.

[0083] With this configuration, the first device data recorded in the first device ledger can also be reflected in the third device ledger, thereby reducing the effort required to record device data separately in multiple ledgers.

[0084] (6) In the information processing system described in (5) above, in the management step, a second management system that manages the first device ledger, the second device ledger, and a third management system that manages the third device ledger are managed, and in the output step, instructions are output to the second management system and the third management system so that the first device data is reflected in the items recorded in the second device ledger and the third device ledger that correspond to the first device data that has been input.

[0085] According to this configuration, it is possible to manage a plurality of management systems each having a device ledger, and therefore it is possible to more efficiently execute linkage of device data.

[0086] (7) In the information processing system described in any one of (2) to (6) above, the second device ledger is managed by a second management system, and the second management system is configured to be able to output the second device data so that the second device data is reflected in items recorded in the first device ledger that correspond to the second device data recorded in the second device ledger.

[0087] With this configuration, the second device data recorded in the second device ledger can also be reflected in the first device ledger, thereby reducing the effort required to record device data separately in each ledger.

[0088] (8) In the information processing system described in any one of (7) above, the second management system is a system that performs mobile device management and has the function of end-point management of the one or more devices.

[0089] According to this configuration, the second management system has an endpoint management function for devices linked to the first device data reflected from the first device ledger to the second device ledger, and therefore can more efficiently manage device data and the devices themselves.

[0090] (9) In the information processing system described in any one of (2) to (8) above, the employee register data includes at least one of employee email address data, device location data, device status data, and device custom property data.

[0091] This configuration reduces the effort required to record employee email address data, device location data, device status data, and device custom property data separately in their respective ledgers.

[0092] (10) An information processing method executed by an information processing system, the information processing method comprising the steps executed by the one or more processors according to any one of (1) to (9) above.

[0093] (11) A program that causes one or more processors to execute each step described in any one of (1) to (9) above. Of course, this is not the case.

[0094] Finally, while various embodiments of the present invention have been described, they are presented by way of example only and are not intended to limit the scope of the invention. The novel embodiments may be embodied in various other forms, and various omissions, substitutions, and modifications may be made without departing from the spirit of the invention. Such embodiments and modifications are intended to be included within the scope and spirit of the invention, as well as within the scope of the invention and its equivalents as defined in the accompanying claims. [Explanation of symbols]

[0095] 1: Information processing system 2: First server device 21: Processor 210: Information acquisition department 211: Information output unit 212: Management Department 22: Storage section 23: Communications Department 3: Second server device 31: Processor 310: Information acquisition department 311: Information output unit 312: Management Department 313: Kitting Department 32: Storage section 33: Communications Department 4: Third server device 5: Administrator device 51: Processor 52: Storage section 53: Communications Department 54: Input section 55: Output section 6: Employee devices N: Network

Claims

1. An information processing system comprising one or more processors that execute the following steps: In the acquisition step, first device data recorded in the first device ledger is acquired; The device ledger is linked to one or more devices and records device data for each device, the device data is data relating to a device, In the output step, the first device data is output so that the first device data is reflected in an item recorded in a second device ledger corresponding to the input of the first device data. Information processing system.

2. 2. The information processing system according to claim 1, The device data includes employee ledger data, and the employee ledger data is data specific to an employee that can identify an employee within an organization, or data on device usage within the organization. Information processing system.

3. 3. The information processing system according to claim 2, The second device ledger includes: managed by a second management system; Second device data is recorded, the second management system is configured to be able to perform kitting on a device associated with the second device data. Information processing system.

4. 4. The information processing system according to claim 3, The kitting content is identified for each employee based on at least one of data included in the employee ledger data, including the user's email address, the user's department within the organization, and the user's location within the organization. Information processing system.

5. 3. The information processing system according to claim 2, In the output step, the first device data is output so that the first device data is reflected in an item recorded in a third device ledger corresponding to the input of the first device data; the third device ledger is different from the second device ledger; Information processing system.

6. 6. The information processing system according to claim 5, In the management step, a second management system that manages the first device ledger, the second device ledger, and a third management system that manages the third device ledger are managed; In the output step, instructions are output to the second management system and the third management system so that the first device data is reflected in items recorded in the second device ledger and the third device ledger, respectively, corresponding to the first device data that has been received as input. Information processing system.

7. 3. The information processing system according to claim 2, the second device ledger is managed by a second management system; The second management system The second device register is configured to be outputtable so that the second device data is reflected in an item recorded in the first device register that corresponds to the second device data recorded in the second device register. Information processing system.

8. 8. The information processing system according to claim 7, the second management system is a system that performs mobile device management and has a function of end point management of the one or more devices; Information processing system.

9. 3. The information processing system according to claim 2, The employee register data includes at least one of employee email address data, device location data, device status data, and device custom property data; Information processing system.

10. An information processing method executed by an information processing system, The method comprises the steps executed by the one or more processors according to any one of claims 1 to 9. Information processing methods.

11. A program, The steps according to any one of claims 1 to 9 are executed by one or more processors. program.

Citation Information

Patent Citations

  • Techniques for discovering and managing application security

    JP2022050462A