Information processing apparatus, information processing method, and program

Abstract

To add file path or URL information to an operation log that does not include the information, thereby allowing a user to easily understand actual operation.SOLUTION: An information processing apparatus includes: log acquisition means which acquires a history of operations performed by a user, as operation logs; addition means which adds a file path or URL to a specific log that does not include a file path or URL; and recording means which records the operation log with which the file path or the URL is associated by the addition means, on a log file. When an operation log acquired by the log acquisition means is a specific operation log, the addition means adds a file path or URL included in reference information to the specific operation log, on the basis of information on the specific operation log and information on the reference information.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an information processing device, an information processing method, and a program. [Background technology]

[0002] With the widespread use of computers in recent years, their use in companies has become commonplace. Employees spend the majority of their working hours creating and editing documents and browsing websites via computers. Therefore, it is believed that understanding the amount of time employees spend working with files and browsing websites will lead to improved employee productivity and work efficiency. It is known that companies use the operation logs of each employee's personal computer (PC) to understand the operations and time spent by employees.

[0003] Patent Document 1 discloses a system that detects repeated operations by linking file names (window title names) and process names when analyzing patterns to determine the categories of tasks that employees are performing using PC applications. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2012-14530 Summary of the Invention [Problem to be solved by the invention]

[0005] The system in Patent Document 1 performs task analysis for each file name (window title name). Specifically, the file name of the file corresponding to the active window (called the active window) is saved as a log.

[0006] However, some applications allow users to simultaneously open different files with the same name that are saved in different file paths. When a user opens and operates multiple files with the same name, the file path of the file the user is operating on cannot be uniquely determined, and accurate logs may not be recorded. Even if such operation logs are used for business analysis, accurate analysis results may not be obtained.

[0007] Therefore, an object of the present invention is to add operation log information to an operation log that does not include necessary information such as a file path or a URL. [Means for solving the problem]

[0008] In order to achieve the above object, an information processing device according to one aspect of the present invention has the following configuration: That is, the information processing device includes a log acquisition means that acquires a history of operations performed by a user as an operation log, an assignment means that assigns a file path or a URL to a specific operation log that does not have a file path or a URL, and a recording means that records the operation log linked to the file path or the URL by the assignment means in a log file, wherein when the operation log acquired by the log acquisition means is the specific operation log, the assignment means assigns the file path or URL information included in the reference information to the specific operation log based on information related to the specific operation log and information related to the reference information. [Effects of the Invention]

[0009] According to the present invention, it is possible to add operation log information to an operation log that does not have necessary information such as a file path or a URL. [Brief explanation of the drawings]

[0010] [Figure 1] 1 is a diagram showing the configuration of an information processing system according to a first embodiment of the present invention. [Figure 2] FIG. 2 is a block diagram illustrating the hardware configuration of a client terminal device according to the first embodiment. [Figure 3] FIG. 2 is a block diagram illustrating the hardware configuration of a server device according to the first embodiment. [Figure 4] 6 is a flowchart showing processing performed by a client terminal device according to the first embodiment by executing log software. [Figure 5] (a) is a diagram showing an operation log consisting of a file access log and an active window log, and (b) is a diagram showing an operation log consisting of an active window log, a web access log, and an operation time aggregation log. [Figure 6] FIG. 10 is a diagram showing an example of a reference list that stores reference information. [Figure 7] 10 is a flowchart showing a process performed by a client terminal device by executing log software. [Figure 8] FIG. 10 is a diagram showing an example of a state in which reference information is sorted in order of operation date and time. [Figure 9] FIG. 10 is a diagram showing an example of an operation log in which a file path is added to an active window log. [Figure 10] 10 is a flowchart showing processing performed by a client terminal device according to the second embodiment by executing log software. [Figure 11] FIG. 10 is a diagram showing an example of an operation log in which a URL is added to an operation time aggregation log. DETAILED DESCRIPTION OF THE INVENTION

[0011] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that the following embodiments do not limit the invention according to the claims. Although multiple features are described in the embodiments, not all of these multiple features are necessarily essential to the invention, and multiple features may be combined arbitrarily. Furthermore, in the drawings, the same reference numerals are used to designate the same or similar components, and redundant explanations will be omitted.

[0012] [First embodiment] <System configuration diagram> First, the configuration of an information processing system according to this embodiment will be described with reference to the system configuration diagram of FIG.

[0013] FIG. 1 is a diagram showing the configuration of an information processing system according to the first embodiment of the present invention.

[0014] As shown in FIG. 1 , the information processing system according to the first embodiment includes information processing devices 110 and 120, each of which is connected to a network 130 such as a LAN or the Internet. Hereinafter, the information processing device 110 may be referred to as a client terminal device, and the information processing device 120 may be referred to as a server device. There may be multiple client terminal devices 110 and server devices 120. The client terminal device 110 and the server device 120 may be any device, such as a PC or mobile terminal device, that is capable of executing the processes described below as being performed by an information processing device. Although the client terminal device 110 is connected via the network 130, it may also be a standalone device that does not use the network 130.

[0015] The information processing system may also be configured using a thin client (e.g., a terminal service). A thin client is a computer architecture in which an information processing device (client terminal device 110) remotely connects to a server computer and executes an application program on the server computer using a virtual desktop environment generated on the server computer. The network 130 may be either wired or wireless.

[0016] <Client Terminal Device 110> The hardware configuration of the client terminal device 110 according to the first embodiment will be described with reference to FIG.

[0017] The CPU (Central Processing Unit) 11 controls the operation of the entire device by executing various processes using computer programs and data stored in the RAM 12 and the ROM 13, and also executes the processes described below as being performed by the device.

[0018] The RAM (Random Access Memory) 12 has an area for temporarily storing computer programs and data loaded from the storage device 16, and an area for temporarily storing various data received from external devices via the I / F (interface) 17. The RAM 12 also has a work area used by the CPU 11 when executing various processes. In this way, the RAM 12 can provide various areas as needed.

[0019] A ROM (Read Only Memory) 13 stores setting data and a boot program for the device.

[0020] The operation unit 14 is made up of a mouse, keyboard, etc., and can be operated by the operator of the device to input various instructions to the CPU 11.

[0021] The display unit 15 is configured with, for example, an organic EL or liquid crystal display, and can display the processing results of the CPU 11 as images, characters, and the like.

[0022] The storage device 16 is a mass-capacity information storage device, such as a hard disk drive. The storage device 16 stores an operating system (OS), computer programs, and data for causing the CPU 11 to execute the processes described below as those performed by the device. The computer programs include log software 16A (log program). The log software 16A is a program for acquiring logs from programs on the client terminal device 110. For example, the log software 16A has the function of monitoring operations on the client terminal device 110 and storing the logs in the storage device 16 as operation logs. The log software 16A may also have an output function for transmitting data related to the operation logs to the server device 120. The computer programs and data stored in the storage device 16 are loaded into the RAM 12 as appropriate under the control of the CPU 11 and processed by the CPU 11. It is assumed that multiple application programs are running simultaneously on the client terminal device 110.

[0023] The I / F 17 is used to connect the device to the network 130, and the device can perform data communication with external devices connected to the network 130 via the I / F 17.

[0024] All of the above components are connected to a bus 18 .

[0025] <Server device 120> Fig. 3 is a block diagram illustrating the hardware configuration of the server device 120 according to the first embodiment. This hardware configuration is the same as the hardware configuration of the client terminal device 110 described with reference to Fig. 2. That is, the CPU 21 of the server device 120 uses computer programs and data stored in the storage device 26 of the server device 120 to perform data communication with external devices via the I / F 27 of the server device 120, and also executes each process described below as being performed by the server device 120.

[0026] The CPU 21 executes various processes using computer programs and data loaded in the RAM 22, thereby controlling the overall operation of the device and executing the processes described below as those performed by the device. The RAM 22 has an area for temporarily storing computer programs and data loaded from the storage device 26 and an area for temporarily storing various data received from external devices via the I / F (interface) 27. The RAM 22 also has a work area used by the CPU 21 when executing various processes. In this way, the RAM 22 can provide various areas as needed. The ROM 23 stores setting data and boot programs for the device. The operation unit 24 includes a pointing device and a keyboard, and can be operated by an operator of the device to input various instructions to the CPU 21. The display unit 25 can display the results of processing by the CPU 21 as images, text, etc. The storage device 26 is a large-capacity storage device, such as a hard disk drive. The I / F 27 is used to connect the device to the network 130, and the device can perform data communication with external devices connected to the network 130 via the I / F 27. All of the above components are connected to a bus 28.

[0027] In this embodiment, the description will be given assuming that the client terminal device 110 is a PC. Logging software 16A stored in the storage device 16 of the client terminal device 110 writes out the operation log of the PC, which will be described later, to a log file (a file that compiles data related to the operation log) and records it in the client terminal device 110. The log file is transmitted from the client terminal device 110 to the server device 120, where it is collectively processed and stored by the storage device 26 of the server device 120.

[0028] There are various possible conditions for sending a log file from client terminal device 110 to server device 120. For example, when a predetermined time has elapsed (e.g., every two hours), when a predetermined amount of operation history has been accumulated, when client terminal device 110 is started up, when client terminal device 110 is instructed to shut down, when server device 120 requests that the operation history be sent, etc.

[0029] The server device 120 accumulates the operation logs collected from the client terminal devices 110 in the storage device 26, and processes and stores the accumulated operation logs in a lump. Note that instead of the server device 120 processing and storing the PC operation logs transmitted from the client terminal devices 110 in a lump, the client terminal devices 110 may store their own operation logs within the client terminal devices 110. In such a case, however, the server device 120 is not essential.

[0030] <Log software 16A processing> Next, the log software 16A stored in the storage device 16 of the client terminal device 110 will be described using the flowchart of FIG. 4. Here, an example will be described in which information such as a file path and a website URL is assigned (linked) to operation logs of a PC that do not contain such information. To simplify the explanation, this process will be described as an example in which file path information is assigned to an active window log. Note that, among operation logs that do not contain such information, which operation logs are assigned information such as a file path and a website URL will be described as having been preset by the user, but the present invention is not limited to this.

[0031] 4 is a flowchart illustrating the processing performed by the client terminal device 110 according to the first embodiment when the client terminal device 110 executes the log software 16A. The CPU 11 of the client terminal device 110 executes this information analysis processing in accordance with the log software 16A.

[0032] First, in S501, the CPU 11 monitors the name of an application program running on the client terminal device 110, window title information displayed in the title display area of ​​the active window of the application program, and the user's operation time while the application program is running. The operation log may be acquired using a file system filter driver, API Hook, a standard Windows (registered trademark) API, or the like. Since the acquisition method is well known, a description thereof will be omitted here.

[0033] 5(a) and (b) are diagrams showing examples of a PC operation log (operation log) acquired by S501. For example, FIG. 5(a) shows an operation log consisting of a file reference log and an active window log, and FIG. 5(b) shows an operation log consisting of a web access log and an operation time aggregation log. In the first embodiment, these operation logs store operation history and terminal information, which will be described later, but the present invention is not limited to this.

[0034] The operation history may include, for example, the following information: · Operation date and time·· The date and time when the operation history was acquired ·Application name of the active window···Process name, etc. · Title of the active window · Caption name (such as the name of the file being edited) File Path: The full path of the file the user is operating on URL: The URL of the web page the user viewed in their web browser. ·Process ID···The process ID of the process that performed the operation · Operation time · The operation time of the window operated by the user In addition to this, for example, information such as the number of keyboard keystrokes, the distance the pointer of the pointing device has moved, sending and receiving of emails, and PC shutdown and startup may also be included.

[0035] The terminal information includes, for example, the user's account name, the PC name, etc. However, it is not limited to these, and may also be a domain name, the PC's IP address, MAC address, etc. Furthermore, this terminal information is information specific to the client terminal device.

[0036] It is assumed that the operation logs in this embodiment include operation logs that have information such as file paths and website URLs, and operation logs that do not. Examples of operation logs that have information such as file paths and website URLs are the file reference log in FIG. 5(a) and the web access log in FIG. 5(b). On the other hand, examples of operation logs that do not have information such as file paths and website URLs are the active window operation log in FIG. 5(a) and the operation time aggregation log in FIG. 5(b). The operation time aggregation log is a type of operation log that acquires the operation time for each window operated by the user and stores the window title (caption) and operation time as a set.

[0037] Next, in S502, it is determined whether the PC operation log acquired in S501 is an operation log (here, a file reference log) that contains information such as a file path and a website URL. If it is determined that the acquired PC operation log is a file reference log, the process proceeds to S503, and if it is determined that it is not a file reference log, the process proceeds to S504.

[0038] In S503, a list of reference information to be used when assigning file path information to the active window log in step S505, which will be described later, is created. Specifically, the process ID, operation date and time, and full path of the referenced file contained in the operation log determined to be a file reference log in S502 are saved (saved) and managed as a list (reference list). Then, the process proceeds to S506, where the operation log is written to a log file (data related to the operation log) that compiles the operation logs. Note that the reference information saved in the reference list may include other information.

[0039] 6 is a diagram showing an example of the reference list saved in S503. In this example, process ID 6400 has referenced multiple files since the process was started, so multiple operation dates and times and file paths are saved in the reference list. In the first embodiment, the process ID is used as a search key in step S505, which will be described later, so the operation date and time and file paths of the referenced files are displayed for each process ID. In the following explanation, the process ID is used as the search key, and the operation date and time and file path are used as reference information.

[0040] In S504, it is determined whether the PC operation log is an operation log (active window log) that does not have information such as a file path or URL. If it is determined that the acquired PC operation log is an active window log, the process proceeds to S505. On the other hand, if it is determined that the acquired PC operation log is not an active window log, the process proceeds to S506, where the operation log is written to a log file, and this process ends.

[0041] <Processing in step S505> The details of the process in step S505 will be described with reference to the flowchart in FIG.

[0042] In S701, the reference list created in S503 is searched to see if it contains an ID identical to the process ID contained in the operation log determined to be the log of the active window in S504. If the same ID does not exist in the reference list, the process in step S505 ends and proceeds to S506, where the active window log is written to a log file, and the process ends.

[0043] On the other hand, if the same ID exists in the reference list, the process proceeds to S702, where all reference information having the same ID is obtained from the reference list.

[0044] Next, in S703, the reference information acquired in S702 is sorted (rearranged) in descending order of the operation date and time. Fig. 8 is a diagram showing an example of the reference list rearranged in S703 in descending order of the operation date and time.

[0045] Next, in S704, the data with the most recent operation date and time is extracted from the reference information.

[0046] Next, in S705, it is determined whether the operation date and time of the data extracted in S704 is earlier (older) than the operation date and time of the active window log. If it is determined that it is in the past, the process proceeds to S706, and if it is not in the past, that is, if the operation date and time of the data extracted in S704 is newer than the active window log, the process proceeds to S708.

[0047] In S708, it is determined whether or not there is data in the reference list other than the data extracted in S704. If there is data, the process returns to S704, the data with the next most recent operation date and time is extracted, and the same process is performed. If there is no data, the process in step S505 ends and proceeds to S506, where the active window log is written to a log file, and the process ends.

[0048] In S706, it is determined whether the window title of the active window is included in the file path (full path) of the extracted data. In other words, it is checking whether the information (window title of the active window) in the PC operation log (active window log) is included in the reference information (file path). If the determination result is that it is included, proceed to S707, and if it is not included, proceed to S708.

[0049] In S707, the file path of the extracted data is added to the active window log. After that, the process in step S505 ends, and the process proceeds to S506, where the active window log is written to a log file, and the process ends.

[0050] 9 is a diagram showing an example of an operation log in which a file path is added to the active window log in S707. By performing this process, a file path can be added to an operation log (active window log) whose reference file path was unknown.

[0051] In the first embodiment, a method for adding file path information is shown, but URL information may be added to an operation log that does not have website URL information. In this case, the following process can be performed.

[0052] In S502, it is determined whether the PC operation log acquired in S501 is an operation log containing URL information (for example, a website access log). If it is determined that the acquired PC operation log is a website access log, the process proceeds to S503, where a list of reference information to be used when assigning URL information to the operation log is created. Specifically, the process ID, operation date and time, and URL of the referenced website contained in the operation log determined in S502 to be a website access log can be stored (saved) and managed as a list (reference list). Thereafter, the same process is performed, and a URL is assigned to the log in S707. This makes it possible to assign URL information to operation logs that do not contain website URL information.

[0053] In the first embodiment, a file reference log is used as the reference source of the file path, but the present invention is not limited to this. Any operation log that includes a file path, such as a file name change log or a folder creation log, may be used.

[0054] In the first embodiment, processing is performed using an active window log as an operation log to which information such as a file path and a website URL is added, but the present invention is not limited to this. A file path or URL may be added to other operation logs that do not contain information such as a file path or URL (for example, a window title change log, an operation time aggregation log, etc.).

[0055] In addition, in the first embodiment, when data is obtained from the reference list (S702, S703), the list is sorted and rearranged in order of operation date and time, but other methods may be used as long as they produce similar results.

[0056] [Second embodiment] In the second embodiment, an example will be described in which information such as a file path and a URL is added to an operation log that does not contain information such as a file path or a website URL, using a method different from that of the first embodiment. Here, an example will be described in which a URL is added to an operation time aggregation log. Note that the same processing steps as in the first embodiment are marked with the same numbers, and therefore their explanation will be omitted.

[0057] FIG. 10 is a flowchart illustrating processing performed by the client terminal device 110 according to the second embodiment by executing the log software 16A.

[0058] First, in S501, the user's PC operation log (operation history) is acquired. An example of the PC operation log acquired in S501 is as described above with reference to Figs. 5(a) and 5(b).

[0059] Next, in S1002, it is determined whether the PC operation log acquired in S501 is an operation log (here, a website access log) that contains information such as a file path and a website URL. If it is determined that the acquired PC operation log is a website access log (hereinafter referred to as a web access log), the process proceeds to S1003, and if it is determined that it is not a web access log, the process proceeds to S1004.

[0060] In S1003, reference information to be used when assigning URL information to the operation time aggregation log in step S1006, which will be described later, is stored. Specifically, the URL information and the web browser process name included in the operation log determined to be a web access log in S1002 are stored as reference information.

[0061] Next, in S1004, it is determined whether the acquired PC operation log is an operation log (operation time total log) that does not have information such as a file path or URL. If it is determined to be an operation time total log, the process proceeds to S1005. If it is determined not to be an operation time total log, the process proceeds to S506, where the operation log is written to a log file and this process ends.

[0062] In S1005, it is determined whether the application program being aggregated in the operation time aggregation log acquired in S1004 is a web browser. In other words, it is determined whether the information (application program name being aggregated) in the PC operation log (operation time aggregation log) contains information about the reference information (web browser process name). If the aggregation target is a web browser, the process proceeds to S1006. If it is determined that the target is not a web browser, the process proceeds to S506, where the operation log is written to a log file, and this process ends.

[0063] In S1006, the reference information (URL) saved in S1003 is added to the operation time aggregation log. Thereafter, the process proceeds to S506, where the web access log and operation time aggregation log are written to a log file, and this process ends.

[0064] 11 is a diagram showing an example of an operation log in which a URL is added to the operation time total log in S1006. By performing this process, it is possible to add the referenced URL to an operation log (operation time total log) in which the referenced URL was unknown.

[0065] In the second embodiment, a URL is assigned to an operation time aggregation log as an operation log, but the present invention is not limited to this. A file path or URL may be assigned to other operation logs that do not contain information such as a file path or URL (for example, an active window log or a window title change log).

[0066] Furthermore, in the second embodiment, the URL and the web browser process name are stored as reference information, but a configuration in which only the URL is stored may be adopted. In that case, a list containing the web browser process names (hereinafter referred to as configuration information) is separately created, and it is determined whether the information (the application program name being the target of aggregation) in the PC operation log (operation time aggregation log) matches the process name included in the configuration information. This makes it possible to confirm whether the aggregation target of the operation time aggregation log is the web browser, as in S1005.

[0067] As described above, by combining PC operation logs, it is possible to add information such as file paths and URLs to operation logs that do not contain such information. This enables more detailed business analysis without having to guess file paths, leading to improved business operations and efficiency.

[0068] Furthermore, in the present invention, the client terminal device 110 executes the log software 16A to perform the processing, but the server device 120 may execute the processing.

[0069] [Other embodiments] The present invention can also be realized by executing the following process: software (programs) that realize the functions of the above-described embodiments are supplied to a system or device via a network or various storage media, and the computer (or CPU, MPU, etc.) of the system or device reads and executes the programs.

Claims

1. a log acquisition means for acquiring a history of operations performed by a user as an operation log; a storage means for storing information of the operation log as reference information when the operation log has a file path or a URL of a web browser; an assigning means for assigning a file path or a URL to a specific operation log that does not have a file path or a URL; a recording means for recording the operation log associated with the file path or URL by the adding means in a log file; Equipped with The information processing device is characterized in that, when the operation log acquired by the log acquisition means is the specific operation log, the assignment means assigns the file path or URL information contained in the reference information to the specific operation log based on information regarding the specific operation log and information regarding the reference information.

2. 2. The information processing apparatus according to claim 1, wherein the storage means stores, as the reference information, a process ID, an operation date and time when the user referenced the file, and a file path of the referenced file.

3. moreover, a reference information acquisition unit that acquires, from the reference information stored in the storage unit, reference information having a process ID that is identical to a process ID stored in the specific operation log; The information processing device according to claim 2, characterized in that the assignment means assigns file path or URL information to the specific operation log based on information regarding the specific operation log and reference information acquired by the reference information acquisition means.

4. Furthermore, the specific operation log has window title information, The information processing device described in claim 3, characterized in that the assignment means assigns file path information to the specific operation log when window title information contained in the specific operation log is included in the file path of the reference information acquired by the reference information acquisition means.

5. moreover, The reference information is a name of a web browser and URL information, the specific operation log has information about the name of an application program; The information processing device described in claim 1, characterized in that the assignment means assigns URL information contained in the reference information to the specific operation log when the application program name information contained in the specific operation log matches the name of the web browser contained in the reference information.

6. 6. The information processing apparatus according to claim 1, wherein the specific operation log is an active window operation log, a window title change log, or an operation time total log.

7. a log acquisition step of acquiring a history of operations performed by the user as an operation log; a storing step of storing information of the operation log as reference information when the operation log has a file path or a URL of a web browser; an assigning step of assigning a file path or a URL to a specific operation log that does not have a file path or a URL; a recording step of recording the operation log associated with the file path or URL in the assigning step into a log file; Equipped with The information processing method is characterized in that, when the operation log acquired by the log acquisition process is the specific operation log, the assignment process assigns file path or URL information contained in the reference information to the specific operation log based on information regarding the specific operation log and information regarding the reference information.

8. A computer program for causing a computer to function as each of the means of the information processing apparatus according to claim 1.

Images