Station equipment, station system, method and program for generating log data for station equipment

Abstract

We provide station equipment, station systems, station methods, and station programs that can identify the person who has obtained the displayed personal information. [Solution] According to the embodiment, the station service device includes a display unit, an operation unit, a camera, a communication unit, and a control unit. The display unit displays information. Operation instructions are input to the operation unit. The camera is set to photograph the faces of people who can acquire the information displayed on the display unit. The communication unit communicates with an information management device that manages the personal information of users of the station. When the operation unit instructs the control unit to perform station service including the inquiry of personal information, the control unit starts taking pictures with the camera, displays the personal information acquired from the information management device communicated with by the communication unit on the display unit, and generates log data including the captured image taken by the camera when the personal information is displayed on the display unit.

Description

Technical Field

[0005] , ,

[0001] Embodiments of the present invention relate to a station operation device, a station operation system, a method for generating log data of a station operation device, and a program.

Background Art

[0002] In transportation systems such as railways, a station operation system is provided that includes a station operation device for performing various station operations and a host system communicatively connected to the station operation device. The host system manages customer information including personal information in order to issue station operation equipment season tickets and the like. In addition, at railway stations, there are installed station operation devices for staff operation for performing various processes in response to requests from users. For example, at the ticket window of a station, a window processing machine as a station operation device operated by a staff member is installed.

[0003] A station operation device operated by a staff member such as a window processing machine has a function of querying customer information including personal information from the host system in order to execute various processes in response to requests from users. Conventional station operation devices can query customer information including personal information managed by the host system in a state where the staff member has logged in using the staff ID. However, in a conventional station operation system, there is a possibility that a third party may log in to the station operation device using another staff member's ID, a third party may operate the logged-in station operation device, or the display screen of the station operation device being operated by a staff member may be peeked at by a third party, and there is a problem that it is impossible to identify a person who has obtained the personal information actually displayed on the station operation device.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] To solve the above problems, the present invention aims to provide a station equipment, a station system, a method for generating log data for a station equipment, and a program that can identify the person who has obtained the displayed personal information. [Means for solving the problem]

[0006] According to the embodiment, the station service device includes a display unit, an operation unit, a camera, a communication unit, and a control unit. The display unit displays information. Operation instructions are input to the operation unit. The camera is set to photograph the faces of people whose information displayed on the display unit can be acquired. The communication unit communicates with an information management device that manages the personal information of users of the station. When the operation unit instructs a station service that includes the inquiry of personal information, the control unit starts taking pictures with the camera, displays the personal information acquired from the information management device via the communication unit on the display unit, and generates log data including the captured image taken by the camera when the personal information is displayed on the display unit. [Brief explanation of the drawing]

[0007] [Figure 1] Figure 1 shows an example of the configuration of a station management system having a station management device and an information management device according to an embodiment. [Figure 2] Figure 2 shows an example of the external configuration of a ticket counter processing machine as a station service device in a station service system according to an embodiment. [Figure 3] Figure 3 is a block diagram showing an example configuration of a ticket counter processing machine as a station service device in a station service system according to an embodiment. [Figure 4] Figure 4 is a block diagram showing an example configuration of an information management device in a station management system according to an embodiment. [Figure 5] Figure 5 shows an example of the configuration of log data managed by the information management device in the station management system according to the embodiment. [Figure 6] Figure 6 is a sequence illustrating the processing flow when a station service device performs a station service that involves querying personal information in the station service system according to the embodiment. [Figure 7]Figure 7 is a sequence illustrating the flow of the log data search process in the station management system according to the embodiment. [Modes for carrying out the invention]

[0008] The embodiments will be described below with reference to the drawings. First, the configuration of the station system 1 according to the embodiment will be described. Figure 1 shows an example of the configuration of the station management system 1 according to an embodiment. The station system 1 according to this embodiment includes various station equipment 3 (3A, 3B, 3C) installed at each station and an information management device 5. In the station system 1, each station equipment 3A, 3B, 3C is connected to the information management device 5 via a network 4. The network 4 is, for example, a LAN (Local Area Network). The network 4 may also include a WAN (Wide Area Network), a public network, or a VPN (Virtual Private Network). In this embodiment, although not shown or described, the station system 1 may also include ticket machines or automatic ticket gates connected to the network 4 in addition to the station equipment 3.

[0009] In the configuration example shown in Figure 1, each station service device 3A, 3B, and 3C is an example of station service device operated by station staff. For example, station service device 3A is a ticket counter machine installed inside the station's ticket window and operated by station staff. Station service device 3B is a commuter pass issuing machine operated by station staff to issue commuter passes. Station service device 3C is a staff terminal carried by station staff.

[0010] Next, the configuration of the ticket counter processing machine 3A, which is an example of a station equipment 3 in the station system 1 according to the embodiment, will be described. Figure 2 is a diagram showing an example of the external configuration of a ticket counter processing machine 3A as an example of the station equipment 3 according to the embodiment. Figure 3 is a block diagram showing an example of the configuration of the control system in the ticket counter processing machine 3A as an example of the station equipment 3 according to the embodiment.

[0011] The ticket counter processing machine 3A is installed inside the ticket window of the station that the user visits. The staff member inside the ticket window operates the ticket counter processing machine 3A as a station service device in response to the user's request. The ticket window where the ticket counter processing machine 3A is installed is, for example, located in the space connecting the station premises and the area outside the station, separated by a ticket gate where automatic ticket gates are installed.

[0012] As shown in Figure 1, the counter processing machine 3A is connected to the information management device 5 via communication. By communicating with the information management device 5, the counter processing machine 3A performs various processes using the information stored in the information management device 5. For example, the counter processing machine 3A queries customer information, including personal information of users, managed by the information management device 5, in response to the operations of the staff member. The counter processing machine 3A also transmits log data indicating the content of the operations (station duties) performed by the staff member to the information management device 5, thereby causing the information management device 5 to save the log data.

[0013] The ticket counter 3A, as a station service device, has a media processing function (media processing unit) for processing ticket media such as magnetic tickets and IC cards. The ticket counter 3A performs various processes by reading information recorded on the ticket media and recording information on the ticket media using the media processing unit.

[0014] For example, the ticket counter processing machine 3A performs ticket gate processing by processing the ticket medium presented by the user, rewrites the information recorded on the ticket medium presented by the user at the user's request, and registers the reissue of the ticket medium. In addition, the ticket counter processing machine 3A has a function to query the information management device 5 for customer information, including the personal information of the user who holds an issued ticket such as a commuter pass.

[0015] In the configuration example shown in FIG. 2, the service counter 3A includes a control unit 20, a magnetic ticket processing unit 21, an IC card processing unit 22, a money processing unit 23, a staff ID (Identification) reading unit 24, a display input unit 25, a camera 26, etc. These units are arranged on the work table TB or around the work table TB so that it is easy for the staff to perform their duties. Further, the control unit 20 is communicatively connected to the magnetic ticket processing unit 21, the IC card processing unit 22, the money processing unit 23, the staff ID (Identification) reading unit 24, the display input unit 25, and the camera 26.

[0016] The control unit 20 is constituted by, for example, a personal computer (PC). In the configuration example shown in FIG. 4, the control unit 20 has a processor 31, a ROM (Read Only Memory) 32, a RAM (Random Access Memory) 33, a data memory 34, and a communication unit 35.

[0017] The processor 31 is, for example, a CPU (Central Processing Unit). The processor executes various processes by executing a program. In the control unit 20, the processor 31 executes various processes (station duties) described later by executing a program stored in the ROM 32 or the data memory 34. Note that part or all of the processes described later may be configured to be executed by hardware such as an LSI (Large Scale Integration) or an ASIC (Application Specific Integrated Circuit).

[0018] The ROM 32 is constituted by a non-volatile memory. The RAM 33 is a volatile memory that temporarily holds data. The data memory 34 is a non-volatile memory capable of writing and rewriting data. The data memory 34 is constituted by a storage device such as, for example, an HDD (Hard Disk Drive) or an SSD (Solid State Drive).

[0019] The ROM 32 or the data memory 34 stores various programs executed by the processor 31, such as firmware or application programs. Also, the data memory 34 or the ROM 32 stores control data and data tables used for various processes. The communication unit 35 is composed of a communication interface for communicating with an external device. For example, the communication unit 35 includes a network interface for communicating with the information management device 5 via the network 4.

[0020] The magnetic ticket processing unit 21 is a processing unit that processes magnetic tickets, which are an example of a ticket medium used as a train ticket (including season tickets, etc.) for railways. The magnetic ticket processing unit 21 reads information including the railway usage information stored in the magnetic ticket and writes information to the magnetic ticket based on instructions from the control unit 20. Also, the magnetic ticket processing unit 21 may issue a magnetic ticket (boarding ticket) with the information necessary for entry and exit written under the control of the processor 31.

[0021] The IC card processing unit 22 is a processing unit that processes an IC card, which is an example of a ticket medium used as a train ticket (including season tickets, etc.) for railways, or an electronic device having the same functions as an IC card (hereinafter referred to as an IC card). Also, the IC card processing unit 22 may not only process the IC card presented by the user but also reissue an IC card used as a train ticket such as a season ticket.

[0022] The IC card processed by the IC card processing unit 22 is a portable electronic device equipped with a processor, a memory, a communication interface, etc. The IC card processing unit 22 executes reading or writing of data to the memory provided in the IC card by performing non-contact communication with the IC card via a non-contact communication interface provided in the IC card, for example.

[0023] Furthermore, the memory of the IC card shall store identification information (IDi) that uniquely identifies the IC card. In addition, the memory of the IC card may also store usage information such as entry and exit stations, entry and exit processing times, usage conditions, and available amount information (charge balance information).

[0024] The amount processing unit 23 is a processing unit for handling cash according to the tasks (station duties) being performed. For example, the amount processing unit 23 obtains the amount to be billed to the user (settlement amount) from the processor 31 and performs settlement processing based on the amount of cash inserted into the input section (not shown) and the settlement amount to the user. If the amount of money inserted exceeds the settlement amount, the amount processing unit 23 dispenses the difference as change.

[0025] The Staff ID Reading Unit 24 is an example of a Staff Identification Information Acquisition Unit that acquires the Staff ID (Staff Identification Information) assigned to a staff member. The Staff ID Reading Unit 24 reads the information stored on the Staff Identification Card that identifies the staff member. For example, the Staff Identification Card is an IC card that stores identification information (Staff ID) that identifies the staff member. The Staff ID Reading Unit 24 communicates with the IC card presented at a predetermined reading position and reads the Staff ID from the IC card. Once the Staff ID Reading Unit 24 has read the Staff ID, it outputs the read Staff ID to the Control Unit 20.

[0026] The control unit 20 requests the information management device 5 to authenticate the staff member based on the staff member ID obtained by the staff member ID reading unit 24, and if the staff member authentication based on the staff member ID in the information management device 5 is successful, it permits the staff member to operate the counter processing machine.

[0027] Furthermore, the staff ID reading unit 40 only needs to be capable of obtaining information that identifies a staff member (staff identification information). For example, the staff ID reading unit 40 may read staff identification information by reading a code image presented by the staff member.

[0028] The display input unit 25 is an example of a display unit and an operation unit. The display input unit 25 is composed of a display device equipped with a touch panel. For example, the display input unit 25 is composed of a display device such as an LCD (Liquid Crystal Display) or an organic EL (Electroluminescence) superimposed with a touch panel as a contact detection mechanism. The contact detection method of the touch panel may be any method, such as a resistive touch method or a capacitive touch method. In addition, the counter processing machine 3A may be equipped with an input device such as a keyboard or mouse as an operation unit.

[0029] The display input unit 25 displays an image on the display screen based on instructions from the control unit 20, and also detects the position of a touch on a touch panel provided on the display screen and supplies a signal indicating the touch position to the control unit 20. For example, the display input unit 25 displays GUI (Graphical User Interface) switches for operation. When a touch operation on a GUI switch is detected by the display input unit 25, it generates an operation signal indicating that a touch operation has been performed on the GUI switch and outputs it to the control unit 20. Alternatively, the display input unit 25 may output a signal indicating the position (coordinates) of the touch operation to the control unit 20 so that the control unit 20 can determine which GUI switch the touch operation was performed on.

[0030] Camera 26 is configured to capture a person who is positioned so that the display screen of the display input unit 25 is visible. Camera 26 is also positioned so that its capture area includes the face of the employee operating the counter processing machine 3A. Camera 26 is equipped with a solid-state image sensor, such as a CCD (Charge Coupled Device) or CMOS (Complementary Metal Oxide Semiconductor). Camera 26 converts the light received by the solid-state image sensor into an electrical signal and generates an image based on the converted electrical signal. Camera 26 outputs the generated (captured) image to the control unit 20.

[0031] Furthermore, the camera 26 may have a function to detect a person and adjust shooting conditions such as the shooting direction according to the position of the detected person (for example, autonomous control). Also, the camera 26 may have a function to detect a person's face based on the person's facial feature points and adjust shooting conditions such as the shooting area so that the detected face can be appropriately imaged. Furthermore, the control unit 20 of the counter processing machine 3A may be configured to include an interface (camera interface) for connecting a camera as an external device. In this case, the control unit 20 of the counter processing machine 3A may perform the processing described later using the camera connected via the camera interface.

[0032] Next, the configuration of the information management device (higher-level system) 5 in the station system 1 according to this embodiment will be described. The information management device (higher-level system) 5 consists of one or more servers and manages various types of information used in the station operations system 1. For example, the information management device 5 manages customer information including users' personal information, information about station staff (staff information), and log data showing the operation history of each device in the station operations system 1 (including the operation history by staff).

[0033] Figure 4 is a block diagram showing an example configuration of the information management device 5 in the station system 1 according to this embodiment. As shown in Figure 4, the information management device 5 includes a processor 51, a ROM (Read Only Memory) 52, a RAM (Random Access Memory) 53, a data memory 54, and a communication interface (I / F) 55.

[0034] The processor 51 performs various processes by executing a program. The processor 51 is, for example, a CPU (Central Processing Unit). The processor 51 performs various processes described later by executing a program stored in the ROM 52 or data memory 54. Some or all of the processes described later may be implemented by hardware such as an LSI (Large Scale Integration) or ASIC (Application Specific Integrated Circuit).

[0035] ROM 52 is composed of non-volatile memory. ROM 52 stores programs or control data executed by the processor 51. RAM 53 is volatile memory that temporarily holds data. Data memory 54 is non-volatile memory that allows data to be written to and rewritten. Data memory 54 is composed of a storage device such as an HDD (Hard Disk Drive) or SSD (Solid State Drive). Data memory 54 stores programs such as firmware or application programs executed by the processor 51, as well as various types of data. For example, data memory 54 stores various types of data used in the station system 1 as information to be managed by the information management device 5.

[0036] The communication interface 55 consists of interfaces for communicating with external devices. For example, the communication interface 55 includes a network interface for communicating with each station equipment 3 via the network 4.

[0037] In the information management device 5 according to this embodiment, the data memory 54 includes, as shown in Figure 4, a storage area (first memory) 61 for storing customer information, a storage area (third memory) 62 for storing staff information, and a storage area (second memory) 63 for storing log data.

[0038] The customer information stored in memory area 61 includes personal information (address, name, age, telephone number, etc.) of users of the station system 1. For example, personal information included in the customer information of users who have been issued a commuter pass (pass holders) includes address, name, age, and telephone number.

[0039] The staff information stored in memory area 62 is associated with the staff ID, which is staff identification information assigned to legitimate staff members, and includes the staff member's profile. The staff member profile stored as staff information may also include the staff member's facial image (a facial image for staff member registration). Furthermore, the staff information stored in memory area 62 may also include authentication information (for example, a password) for authenticating the staff member, associated with the staff ID.

[0040] The log data stored in memory area 63 includes information indicating the content of station operations (processing) performed by each station operation device 3. The log data stored in memory area 62 is collected from each station operation device 3. In this embodiment, when a station operation device 3 performs a station operation involving the inquiry of personal information in response to an operation by an employee, it generates log data including the captured image taken by the camera 26 and the employee ID, and supplies the generated log data to the information management device 5. As a result, the information management device 5 acquires log data including the captured image from the station operation device 3 as log data indicating the content of the station operation including the inquiry of personal information performed by the station operation device 3, and stores the acquired log data in the memory area 63 of the data memory 54.

[0041] Figure 5 shows an example of log data stored in the storage area 63 of the data memory 54 by the information management device 5 according to this embodiment. In the example shown in Figure 5, information such as the date and time, processing details, staff ID, identifier, and captured image is stored as log data for station operations involving the retrieval of personal information. The date and time is data indicating the date and time when the station operation device 3 performed the station operation. The processing details are data indicating the content of the station operation performed by the station operation device 3 and the content of the operations performed by the staff. For example, if the station operation device 3 retrieves personal information, the processing details will include not only the type of station operation but also information that includes some or all of the personal information retrieved (displayed) by the station operation device 3.

[0042] The captured image is an image taken by camera 26, which is set to capture a person who can obtain personal information displayed by station equipment 3 when station equipment 3 requests personal information (a person operating station equipment or a person whose display screen on the display input unit is visible). The captured image may also be a facial image of a person such as an employee extracted from the captured image taken by camera 26. The captured image may also be a moving image or one or more still images. The identifier is identification information such as a flag that the information management device 5 assigns to the personal information provided to station equipment 3 in the processing described later.

[0043] Next, the processing of the station system 1 when the station device 3 according to the embodiment displays personal information will be described. Figure 6 shows a sequence of processes in the station system 1 when the station device 3 according to the embodiment displays personal information. Here, as an example of station equipment 3, we will explain the processing flow in station system 1 assuming that the ticket counter processing machine 3A performs station operations (processing), including the inquiry of personal information, in response to operations by an employee.

[0044] The control unit 20 of the counter processing machine 3A reads the staff ID from the staff card presented by the staff member using the staff ID reading unit 24 and verifies that the read staff ID is a valid ID. For example, the control unit 20 of the counter processing machine 3A queries the information management device 5 to determine if the staff ID read by the staff ID reading unit 24 is a valid ID. The processor 51 of the information management device 5 verifies whether the staff ID received from the counter processing machine 3A is a valid staff ID based on the staff information stored in the storage area 62 of the data memory 54, and returns the verification result to the counter processing machine 3A.

[0045] When the information management device 5 confirms that the employee ID is that of a legitimate employee, the control unit 20 of the ticket counter processing machine 3A accepts various station operations from the employee corresponding to the employee ID, as the employee's login status. If a station operation involving the inquiry of personal information is selected (step ST11), the control unit 20 of the ticket counter processing machine 3A receives instructions to inquire about personal information in the selected station operation.

[0046] For example, the control unit 20 of the counter processing machine 3A displays an inquiry button on the operation screen of the station staff selected in the display input unit 25, which instructs the user to inquire about personal information. Specifically, the control unit 20 may display an inquiry button on the display input unit 25 that instructs the user to inquire about personal information based on information that serves as a search key for personal information specified by the staff (for example, name), or it may display an inquiry button on the display input unit 25 that instructs the user to inquire about personal information corresponding to the ticket medium (for example, an IC card for a commuter pass) read by the IC card processing unit 22 or the magnetic ticket processing unit 21.

[0047] When the control unit 20 of the counter processing machine 3A is instructed to inquire about personal information (step ST12), it starts taking pictures with the camera 26 (step ST12). For example, the control unit 20 of the counter processing machine 3A starts taking pictures with the camera 26 in response to an instruction to press the inquiry button displayed on the display input unit 25. For example, the control unit 20 of the counter processing machine 3A acquires the image taken by the camera 26 and stores it in memory such as RAM.

[0048] Camera 26 is configured to capture images of a person operating the counter processing machine 3A, or a person who is in a position where the display screen of the display input unit 25 is visible. Therefore, the control unit 20 of the counter processing machine 3A can acquire images from camera 26 of the operator or a person who is in a position where the display screen is visible, from the moment an instruction to inquire about personal information is given.

[0049] The control unit 20 of the counter processing machine 3A may acquire moving images captured by the camera 26, or it may acquire images captured by the camera 26 at predetermined intervals or timings. Alternatively, the control unit 20 of the counter processing machine 3A may acquire images of people extracted from the images captured by the camera 26 as captured images. For example, the control unit 20 of the counter processing machine 3A may acquire images of the faces of people (operators) extracted from the images captured by the camera 26 as captured images, or it may acquire images showing the movements of people (operators) extracted from the images captured by the camera 26 as captured images.

[0050] Furthermore, when instructed to inquire about personal information, the control unit 20 of the counter processing machine 3A sends a request for personal information to the information management device 5 (step ST14). For example, if information to be used as a search key is specified, the control unit 20 of the counter processing machine 3A requests the information management device 5 to inquire about personal information corresponding to the specified search key. Also, when inquiring about personal information corresponding to a ticket medium, the control unit 20 of the counter processing machine 3A requests the information management device 5 to inquire about personal information using information read from the ticket medium (for example, ticket identification information) as the search key.

[0051] The information management device 5 receives inquiries for personal information from the ticket counter processing machine 3A, which acts as a station service device, via the communication interface 55. When the processor 51 of the information management device 5 receives an inquiry for personal information from the ticket counter processing machine 3A, it searches for personal information (or customer information containing personal information) that includes the specified search key by searching the customer information stored in the storage area 61 of the data memory 54 (step ST15).

[0052] When personal information is extracted from the counter processing machine 3A in response to an inquiry from the information management device 5, the processor 51 sets an identifier to the extracted personal information (step ST16). The identifier is identification information used to identify the personal information to be provided to the counter processing machine 3A.

[0053] For example, the processor 51 of the information management device 5 generates an identifier to be assigned to the personal information provided to the counter processing machine 3A, and embeds the generated identifier into the personal information. The processor 51 of the information management device 5 also associates the identifier embedded in the personal information with information indicating the source of the inquiry (including the date and time, the station equipment that made the inquiry, and the employee ID of the employee who made the inquiry), and stores it in the data memory 54. As a result, even after the personal information with the identifier set (embedded) can be provided to the station equipment, it is possible to confirm when, to which station equipment, and by whose operation the data was provided using the identifier.

[0054] The processor 51 of the information management device 5 sets an identifier in the personal information extracted in response to an inquiry from the counter processing machine 3A, and then transmits the personal information with the identifier set to the counter processing machine 3A, which was the source of the inquiry (step ST17).

[0055] The counter processing machine 3A receives personal information from the information management device 5, which is a higher-level system, via the communication unit 35. When the control unit 20 of the counter processing machine 3A receives personal information from the information management device 5, it displays the received personal information on the display input unit 25 (step ST18) and performs station duties according to the operations of the staff member (step ST19).

[0056] For example, the control unit 20 of the counter service machine 3A verifies the identity of the user based on the personal information displayed on the display input unit 25 and performs station duties in accordance with the user's request. During the execution of such station duties, the control unit 20 of the counter service machine 3A continues to take photographs with the camera 26 from the time the personal information is accessed. As a result, the camera 26 acquires images of people who can see the personal information displayed on the display input unit 25 or people who can access the counter service machine 3A.

[0057] When the control unit 20 of the counter processing machine 3A finishes a station operation that involves displaying personal information, it generates log data including the image captured by the camera 26 (step ST19). In other words, when the control unit 20 of the counter processing machine 3A performs a station operation that involves inquiring about (displaying) personal information, it generates log data including the date and time, processing details, staff ID, identifier to which the personal information is assigned, and the captured image, as illustrated in Figure 5.

[0058] The processing details in log data for station operations involving the inquiry (display) of personal information include identification information of the station equipment that performed the operation, information indicating the station operation performed, and information including some or all of the displayed personal information. Furthermore, the identifier is the identification information assigned to the displayed personal information.

[0059] The captured images included in the log data for station operations involving the inquiry (display) of personal information may be videos captured by camera 26 while the station operations are being performed. In this case, the control unit 20 may compress the video data, or it may reduce the resolution or frame rate of the video to reduce the amount of data. By including videos as the captured images in the log data, it is possible to save not just still images of the person performing the station operations, but videos showing the person's movements while performing those operations as log data.

[0060] Furthermore, the captured images to be included in the log data of station operations involving the inquiry (display) of personal information may be one or more images extracted from images taken by camera 26 while the station operation is being performed. In this case, the control unit 20 may extract images taken at predetermined timings (for example, when personal information is displayed on the display input unit 25, or when an employee inputs an operation instruction), or it may extract characteristic images (for example, images with large changes) from images taken by camera 26 at predetermined intervals. By including images taken at predetermined timings or characteristic images in the log data, it is possible to save not just images of the person performing the station operation, but a group of images showing the person's actions while performing the station operation as log data.

[0061] Furthermore, the captured images to be included in the log data of station operations involving the inquiry (display) of personal information may be facial images (or full-body images of people) of one or more people extracted from images captured by camera 26 during the execution of the station operation. In this case, the control unit 20 may extract facial images of people from characteristic images selected from images captured by camera 26 at predetermined timings, or from images captured by camera 26 at predetermined intervals. This makes it possible to save as log data images in which the faces (or full bodies) of people who operate the ticket counter 3A or who were able to see the display screen can be confirmed.

[0062] When the control unit 20 of the counter processing machine 3A generates log data, it transmits the generated log data to the information management device 5 via the communication unit 35 (step ST20). The information management device 5 receives log data from the ticket counter processing machine 3A, which acts as a station service device, via the communication interface 55. When the processor 51 of the information management device 5 receives log data from the ticket counter processing machine 3A, it stores the received log data in the storage area 63 of the data memory 54 (step ST21).

[0063] According to the above process, in the station system according to the embodiment, the ticket counter, which is a station service device, queries the information management device for personal information in response to the operation of the staff member, starts taking pictures with a camera that is set to be able to photograph the person operating the station service device, and when it performs a station service that involves displaying the personal information obtained from the information management device in response to the query, it generates log data including the images taken by the camera during the performance of the station service and transmits it to the information management device. The information management device provides personal information in response to the inquiry for personal information from the station service device and stores the log data received from the station service device.

[0064] As a result, the station management system according to the embodiment can record log data including images of the person who operated the station management device when performing station duties involving the display of personal information on the station management device, and of the person whose personal information displayed on the display unit of the station management device could have been obtained. As a result, it is possible to deter the leakage of personal information displayed on the station management device.

[0065] Furthermore, the station service device according to this embodiment generates log data that includes video footage captured by the camera when personal information is displayed on the display input unit, as log data when station service is performed that involves the display of personal information. This allows not only the face of the person when the personal information was displayed to be confirmed from the video footage included in the log data, but also the movements of the person in the captured image. As a result, it is possible to confirm not only the face of the operator, but also actions taken by the person who was able to obtain the displayed personal information, such as taking notes or copying the personal information to another electronic device, from the video footage.

[0066] Furthermore, the station service device according to this embodiment generates log data that includes multiple images captured by the camera when personal information is displayed in the display input unit, as log data when station service is performed that involves the display of personal information. This makes it possible to confirm the face, movements, etc., of the person from whom the displayed personal information could be obtained from the multiple images included in the log data.

[0067] Furthermore, the station service device according to the embodiment generates log data that includes a face image extracted from a captured image taken by the camera when personal information is displayed in the display input unit, as log data when station service is performed that involves the display of personal information. As a result, according to the station service system according to the embodiment, the face of the person whose personal information could be obtained can be clearly identified by the face image extracted from the captured image included in the log data.

[0068] Furthermore, in the station operations system according to the embodiment, when the information management device receives an inquiry for personal information from the station operations device, it provides the station operations device with the personal information to which an identifier has been assigned, and stores information indicating the source of the inquiry in association with the identifier. As a result, if personal information provided from the information management device to the station operations device is leaked, the station operations system according to the embodiment can identify the source of the inquiry for the personal information if the identifier assigned to the leaked personal information can be detected.

[0069] Next, we will describe a search process for searching for station log data, including the display of personal information, stored by the station equipment 3 in the station system 1 according to the embodiment. Figure 7 shows a sequence of search processes in the station management system 1 according to the embodiment, which searches for log data of station operations that includes the display of personal information by the station management device 3. This section describes the processing flow in the station system 1 when a ticket counter processing machine 3A, which is an example of station equipment 3, requests a search for log data in which personal information has been accessed (displayed). However, the information management device 5 in the station system is not limited to searching log data in response to a search request from station equipment 3, but may also search log data in response to a search request from a device that can access the information management device 5.

[0070] The control unit 20 of the counter processing machine 3A verifies that the operator is a legitimate employee by reading the employee ID from the employee card presented by the employee using the employee ID reading unit 24. Once the control unit 20 of the counter processing machine 3A verifies that the operator is a legitimate employee, it accepts various station operations from that employee. Here, the employee selects to search the log data (log search for personal information inquiries) where they have performed an inquiry (display) of personal information using the display input unit 25 as the operation unit.

[0071] When log search for personal information inquiry is selected, the control unit 20 of the counter processing machine 3A accepts input of information to be used as a search key (step ST32). For example, the control unit 20 of the counter processing machine 3A displays an input field (or selection field) for the search key of the log search on the display screen displayed on the display input unit 25, and displays a search button to instruct the search when the information to be used as the search key has been entered into the input field. Here, the search key can be any information contained in the log data for personal information inquiry. Specifically, the search key may be entered (specified) as the date and time, staff ID, or information contained in the processing content (details of station operations, part of personal information).

[0072] Furthermore, the search key may be set to include a facial image of a specific person as an image that may be included in the captured images in the log data. In this case, the information management device should detect log data that contains captured images with a similarity to the facial image of the specific person used as the search key that is equal to or greater than a predetermined value. In addition, the counter processing machine 3A may receive the facial image of the specific person used as the search key from an external device connected via an interface (not shown).

[0073] When the control unit 20 of the counter processing machine 3A receives an instruction to search the log data with the search key information entered, it sends a log search request to the information management device 5 via the communication unit 35, requesting a search for log data for personal information inquiries (step ST33).

[0074] The information management device 5 receives a log search request regarding personal information inquiry from the ticket counter processing machine 3A, which acts as a station service device, via the communication interface 55. When the processor 51 of the information management device 5 receives a log search request from the ticket counter processing machine 3A, it searches the log data stored in the storage area 63 of the data memory 54 for log data containing the information specified as the search key (step ST34).

[0075] For example, if a date and time are specified as the search key, the processor 51 of the information management device 5 extracts log data of personal information inquiries for the specified date and time from the storage area 63. Also, if an employee ID and a period are specified as the search key, the processor 51 of the information management device 5 extracts log data for the specified employee ID from the log data for the specified period from the storage area 63. Also, if a part of personal information (e.g., name) is specified as the search key, the processor 51 of the information management device 5 extracts log data from the storage area 63 that includes the part of personal information specified as the search key. Also, if a facial image of a specific person is specified as the search key, the processor 51 of the information management device 5 extracts log data from the storage area 63 that contains captured images with a similarity to the facial image of the specific person that is equal to or greater than a predetermined value.

[0076] The processor 51 of the information management device 5 searches for log data containing information for the specified search key, and then transmits the search results, which show the log data extracted by the search, to the ticket counter processing machine 3A, which is the station service device 3 that initiated the search (step ST35). The processor 51 of the information management device 5 generates search results that include all the log data extracted by the specified search key. However, the search results do not have to include all of the extracted log data. For example, the processor 51 may generate search results that show the staff ID and the captured image for each piece of extracted log data.

[0077] The control unit 20 of the counter processing machine 3A receives the search results of log data in response to a log search request from the information management device 5 via the communication unit 35. When the control unit 20 of the counter processing machine 3A receives the search results of log data from the information management device 5, it displays the captured image and the staff ID on the display input unit 25 when personal information containing the specified search key is displayed based on the search results (step ST36). For example, the control unit 20 of the counter processing machine 3A stores the search results received from the information management device 5 in memory such as RAM, and displays the stored search results on the display input unit 25 in a predetermined format.

[0078] For example, the control unit 20 of the counter processing machine 3A displays a list of the captured images and information such as the staff ID for each log data obtained as a search result for the log data in which personal information was inquired about, on the display input unit 25. In this case, when one log data is selected from the list of log data displayed on the display input unit 25, the control unit 20 may also display detailed information of the selected log data on the display input unit 25. Alternatively, the control unit 20 may obtain staff information corresponding to the staff ID of the selected log data from the information management device 5 and display the staff information corresponding to the staff ID of the selected log data on the display input unit 25 along with the captured image of the log data.

[0079] Furthermore, if the captured image of the log data obtained as a search result is a video, the control unit 20 displays a list of information such as the staff ID of the log data along with a thumbnail of the video image for each log data. In this case, the control unit 20 may also display the video of the selected log data when one of the log data displayed in the list is selected. The control unit 20 may also display staff information corresponding to the staff ID of the selected log data along with the video image of the log data on the display input unit 25.

[0080] Furthermore, if each log data obtained as a search result includes multiple captured images, the control unit 20 may display a representative image from among the multiple captured images for each log data, or it may switch between and display the multiple captured images at a predetermined interval. In this case, when one of the displayed log data is selected, the control unit 20 may display a list of the multiple captured images in the selected log data on the display input unit 25. In addition, the control unit 20 may display the staff information corresponding to the staff ID of the selected log data along with the list of multiple captured images on the display input unit 25.

[0081] Furthermore, if the log data included in the search results contains a face image extracted from a captured image, the control unit 20 displays the face image of the person extracted from the captured image on the display input unit 25 along with information such as the staff ID in the log data. In this case, the control unit 20 may also obtain the face image of the staff member included in the staff member information corresponding to the staff member ID (the face image registered as staff member information) from the information management device 5, and display both the face image of the staff member corresponding to the staff member ID and the face image extracted from the captured image on the display input unit 25.

[0082] According to the above processing, the station equipment according to the embodiment requests the information management device to search for log data when personal information is requested by specifying a search key, and displays the captured image taken by the camera when personal information is displayed based on the log data obtained as a search result from the information management device.

[0083] This allows for retrospective review of log data, including images captured when personal information was accessed. This enables the identification of not only the employee ID but also the individuals whose personal information could have been obtained, based on the captured images. As a result, if a personal information leak is discovered, the individuals who could have obtained the leaked personal information can be identified using the actual captured images, and those suspected of leaking the personal information can be identified.

[0084] Furthermore, the station management system according to the embodiment displays the captured image and staff ID when displaying personal information based on log data obtained as search results from the information management device, and also displays staff information corresponding to the staff ID.

[0085] As a result, the station equipment according to the embodiment can retrospectively review log data including the captured image and employee ID taken when the personal information inquiry was performed, and can confirm the employee ID presented by the person who performed the operation, or the employee information corresponding to the employee ID, along with the captured image of the person from whom personal information could actually be obtained.

[0086] In the above-described embodiment, station equipment such as ticket counters execute various processes by running programs stored in their own memory. However, some or all of the processes performed by the station equipment may be performed in response to instructions from an information management device acting as a higher-level system. In other words, the station system according to the embodiment may be implemented by making each station equipment, such as ticket counters, into thin clients. In this case, the programs for the processes performed by the station equipment may be installed in the information management device acting as a higher-level system, and the information management device may execute them in cooperation with the station equipment.

[0087] While several embodiments of the present invention have been described, these embodiments are presented as examples only and are not intended to limit the scope of the invention. These novel embodiments can be carried out in a variety of other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their variations are included in the scope and spirit of the invention, as well as in the claims of the invention and its equivalents. [Explanation of symbols]

[0088] 1... Station system, 3 (3A, 3B, 3C)... Station equipment, 3A... Ticket counter processing machine (station equipment), 3B... Staff-operated commuter pass issuing machine (station equipment), 3C... Staff terminal (station equipment), 4... Network, 5... Information management device (higher-level system), 20... Control unit, 21... Magnetic ticket processing unit, 22... IC card processing unit, 23... Amount processing unit, 24... Staff ID reading unit (staff identification information acquisition unit), 25... Display input unit (display unit, operation unit), 26... Camera, 31... Processor, 32... ROM, 33... RAM, 34... Data memory, 35... Communication unit, 51... Processor, 52... ROM, 53... RAM, 54... Data memory, 55... Communication interface, 61... Memory area (first memory), 62... Memory area, 63... Memory area (second memory).

Claims

1. A display unit that displays information, The control unit into which operation instructions are entered, A camera set to capture the face of a person capable of capturing the information displayed on the aforementioned display unit, A communication unit that communicates with an information management device that manages the personal information of users who use the station, A control unit which, when the operation unit instructs station operations including the inquiry of personal information, starts taking pictures with the camera, displays the personal information obtained from the information management device communicated by the communication unit on the display unit, and generates log data including the captured image taken by the camera when the personal information is displayed on the display unit, Station equipment equipped with the necessary components.

2. The control unit transmits the generated log data to the information management device that stores the log data communicated by the communication unit. The station equipment according to claim 1.

3. Furthermore, it has a staff identification information acquisition unit that acquires staff identification information assigned to staff members, The control unit, while logged into the information management device using the employee identification information acquired by the employee identification information acquisition unit, acquires personal information from the information management device, and generates log data including the captured image taken by the camera and the employee identification information when the personal information is displayed on the display unit. The station equipment according to claim 2.

4. The control unit shall include the captured images to be included in the log data as moving images captured by the camera when the personal information is displayed on the display unit. The station equipment according to claim 1.

5. The control unit shall include in the log data multiple images captured by the camera when the personal information is displayed on the display unit. The station equipment according to claim 1.

6. The control unit shall include the captured image to be included in the log data as a face image extracted from the image captured by the camera when the personal information is displayed on the display unit. The station equipment according to claim 1.

7. The control unit requests the information management device to search for log data including captured images when personal information is displayed, and displays the captured images included in the log data obtained from the information management device as a search result on the display unit. The station equipment according to claim 2.

8. The control unit requests the information management device to search for log data including captured images when personal information is displayed, and displays the captured images and staff identification information included in the log data obtained from the information management device as search results on the display unit. The station equipment according to claim 3.

9. The control unit acquires staff information corresponding to the staff identification information displayed on the display unit from the information management device, and displays the staff information corresponding to the staff identification information on the display unit together with the captured image included in the log data acquired as a search result from the information management device. The station equipment according to claim 8.

10. In a station management system having an information management device and a station management device, The aforementioned station equipment is A communication unit that communicates with the aforementioned information management device, A display unit that displays information, The control unit into which operation instructions are entered, A camera set to photograph a person who can acquire the information displayed on the aforementioned display unit, The control unit has the following functions: When the operation unit instructs a station worker to display personal information on the display unit, it starts taking pictures with the camera, and when the personal information acquired from the information management device is displayed on the display unit, it transmits log data including the captured image taken by the camera to the information management device. The aforementioned information management device is A communication interface that communicates with station equipment, A first memory that stores customer information, including personal information of customers using the station, A second memory that stores log data showing the operation history of the station equipment, A processor that, upon receiving a request for personal information from the station equipment, transmits the personal information stored in the first memory to the station equipment in response to the request, and stores log data, including an image taken by the camera when the personal information obtained from the station equipment is displayed, in the second memory. Station management system.

11. When the processor of the information management device receives a request for personal information from the station equipment, it assigns an identifier to the personal information to be transmitted to the station equipment in response to the request. The station management system according to claim 10.

12. The control unit of the station equipment requests the information management device to search for log data including images captured when personal information is displayed, and displays the captured images included in the log data obtained from the information management device as a search result on the display unit. When the processor of the information management device receives a request to search for log data from the station equipment, it transmits to the station equipment information indicating the search results of the log data in response to the search request. The station management system according to claim 10.

13. A method for generating log data for a station equipment having a camera configured to capture the face of a person capable of acquiring information displayed on the display unit, When station duties including the inquiry of personal information are instructed, the aforementioned camera will begin recording. It communicates with an information management device that manages the personal information of users who use the station. Personal information is acquired from the aforementioned information management device, The personal information obtained from the information management device is displayed on the display unit. When the personal information is displayed on the display unit, log data including the captured image taken by the camera is generated. Method for generating log data for station management equipment.

14. A station service device having a camera set to capture the face of a person who can acquire the information displayed on the display unit, When station duties including the inquiry of personal information are instructed, the aforementioned camera will begin recording. It communicates with an information management device that manages the personal information of users who use the station. Personal information is acquired from the aforementioned information management device, The personal information obtained from the information management device is displayed on the display unit. When the personal information is displayed on the display unit, log data including the captured image taken by the camera is generated. A program that performs an action.

Images