Information processing methods, information processing systems, and programs

Abstract

This invention provides an information processing method, information processing system, and program that improve security when acquiring evidence data. [Solution] The method receives a message sent from the issuer of the certificate data. The message contains storage location information indicating the location of the certificate data on the Web. The method also extracts the storage location information from the message, obtains authentication information registered in association with the issuer, displays a graphical user interface component on a predetermined screen of the operator terminal for logging into the Web storage location indicated by the storage location information, and when the graphical user interface component is selected, logs into the Web storage location indicated by the storage location information based on the storage location information and authentication information.

Description

Technical Field

[0001] The present invention relates to an information processing method, an information processing system, and a program.

Background Art

[0002] Patent Document 1 discloses a process for a proxy service for certificate processing.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the technology of the prior art documents, the ID information and password information necessary to access the invoice data acquisition screen for downloading invoice data from the cloud service are also displayed on the operator terminal. Therefore, there was a problem in terms of security.

Means for Solving the Problems

[0005] According to one aspect of this disclosure, an information processing method is provided that an information processing system can perform. The information processing method includes the step of receiving a message sent from the issuer of the certificate data. The message includes storage location information indicating the location of the certificate data on the Web. The information processing method includes the step of extracting the storage location information from the message. The information processing method includes the step of obtaining authentication information registered in association with the issuer. The information processing method includes the step of displaying a graphical user interface component for logging into the Web storage location indicated by the storage location information on a predetermined screen of an operator terminal. If the graphical user interface component is selected, the information processing method includes the step of logging into the Web storage location indicated by the storage location information based on the storage location information and the authentication information. [Brief explanation of the drawing]

[0006] [Figure 1] Figure 1 shows an example of the system configuration of an information processing system. [Figure 2] Figure 2 shows an example of the hardware configuration of a server device. [Figure 3] Figure 3 shows an example of the hardware configuration of a client device. [Figure 4] Figure 4 is a flowchart showing an example of information processing related to receiving emails. [Figure 5] Figure 5 is a flowchart showing an example of information processing related to the uploading of supporting document data. [Figure 6] Figure 6 shows an example of an operator's work screen. [Figure 7] Figure 7 shows an example of the operator's work screen in Modification Example 1. [Modes for carrying out the invention]

[0007] Embodiments of the present invention will be described below with reference to the drawings. The various features shown in the embodiments below can be combined with each other.

[0008] <Embodiment 1> 1. System Configuration Diagram Figure 1 shows an example of the system configuration of the information processing system 1000. As shown in Figure 1, the information processing system 1000 includes, as a system configuration, a server device 100, a client device 110, a client device 120, and a client device 130.

[0009] Server device 100, client devices 110, client devices 120, and client devices 130 are connected to each other via network 150. Network 150 includes a WAN (Wide Area Network), a LAN (Local Area Network), and the Internet, or any combination thereof. Network 150 includes wired networks and wireless networks.

[0010] Information processing system 1000 is an information processing system that provides services such as processing of supporting document data. Supporting documents are a general term for various documents that prove the facts of a transaction. Examples of supporting documents include documents that serve as evidence of transactions with business partners, such as invoices, receipts, purchase orders, delivery slips, acknowledgments, checkbooks, and payment certificates. Supporting document data is the electronic data of supporting documents.

[0011] The server device 100 is the device that provides the main functions of the information processing system 1000. The main processes described below are performed by the server device 100.

[0012] Client device 110 is an example of a device for the recipient of the document data. The recipient of the document data is a user of the information processing system 1000. A user of the information processing system 1000 is a person who has an account for the information processing system 1000 issued by the information processing system 1000 and uses the services provided by the information processing system 1000. Server device 100 is an example of a management system for managing the document data. Note that the management system for managing the document data may be a different carrier (another server device or another hardware system) from server device 100. A more specific example of a management system is the Bill One (registered trademark) system provided by the applicant. Client device 120 is an example of a device issued by the document data issuer. Client device 130 is an example of a device used by an agent that processes evidence data on behalf of another party. This agent can also be called an operator. Client device 130 is an example of an operator terminal.

[0013] Here, the information processing system described in the claims may consist of multiple devices or of a single device. If the information processing system described in the claims consists of a single device, an example of such a device is a server device 100. If the information processing system described in the claims consists of multiple devices, examples of multiple devices include a cloud server composed of multiple server devices that provide the functions of server device 100, or server device 100 and client device 130, etc.

[0014] 2. Hardware Configuration (1) Hardware configuration of server device 100 Figure 2 shows an example of the hardware configuration of server device 100. As shown in Figure 2, the server device 100 includes, as a hardware configuration, a control unit 210, a storage unit 220, a communication unit 230, and an internal bus 240. The control unit 210, the storage unit 220, and the communication unit 230 are electrically connected via the internal bus 240.

[0015] The control unit 210 is a CPU (Central Processing Unit) or the like, and controls the entire server device 100.

[0016] The storage unit 220 is any one of an HDD (Hard Disk Drive), a ROM (Read Only Memory), a RAM (Random Access Memory), an SSD (Solid Sate Drive), or any combination thereof, and stores programs, data, etc. that are used when the control unit 210 executes processing based on the programs. The storage unit 220 is an example of a storage medium. Examples of the data used when the control unit 210 executes processing based on a program include, for example, the email data and authentication data described later. In the following, the server device 100 will be described as having a ROM, a RAM, an HDD, and an SSD as the storage unit.

[0017] In the specification, it is described that the data used when the control unit 210 executes processing based on a program is stored in the storage unit 220, but it may be stored in the storage unit of another device communicable with the server device 100. The data may be stored in the storage unit of any device as long as the control unit 210 can refer to or acquire it. By the control unit 210 executing processing based on the program stored in the storage unit 220, the functions of the server device 100 and the processing of the flowcharts shown in FIGS. 4 and 5 described later are realized.

[0018] The communication unit 230 connects the server device 100 to the network 150 and controls communication with other devices.

[0019] Note that the hardware configurations of the control unit 210, the storage unit 220, and the communication unit 230 are not limited to one. For example, a plurality of control units may be included in the server device 100. The same applies to the client device 110 shown below.

[0020] (2) Hardware Configuration of Client Device 110 Figure 3 shows an example of the hardware configuration of the client device 110. As shown in Figure 3, the client device 110 includes, as a hardware configuration, a control unit 310, a storage unit 320, an input unit 330, an output unit 340, a communication unit 350, and an internal bus 360. The control unit 310, the storage unit 320, the input unit 330, the output unit 340, and the communication unit 350 are electrically connected via the internal bus 360.

[0021] The control unit 310 is a CPU or the like, and controls the entire client device 110.

[0022] The storage unit 320 is one of the following: HDD, ROM, RAM, SSD, etc., or any combination thereof, and stores programs, data used by the control unit 310 when executing processing based on the programs, etc. The storage unit 320 is an example of a storage medium.

[0023] In this specification, the data used by the control unit 310 when executing processing based on the program is described as being stored in the storage unit 320, but it may also be stored in the storage unit of another device that can communicate with the client device 110. The data may be stored in the storage unit of any device as long as the control unit 310 can access or retrieve it. The functions of the client device 110 are realized when the control unit 310 executes processing based on the program stored in the storage unit 320.

[0024] The input unit 330 is a device that inputs information to the client device 110 in response to the operator's operation. The input unit 330 receives operation input made by the operator. The operation input is transferred to the control unit 310 via the internal bus 360 as a command signal. The control unit 310 can, if necessary, perform predetermined control and / or calculations based on the transferred command signal. The input unit 330 may be included in the housing of the client device 110 or it may be externally mounted. For example, the input unit 330 may be implemented as a touch panel integrated with the output unit 340. When the input unit 330 is implemented as a touch panel, the operator can input tap operations, swipe operations, etc. to the input unit 330. Instead of a touch panel, the input unit 330 can be a switch button, mouse, trackpad, keyboard, etc.

[0025] The output unit 340 is, for example, a display unit, which outputs (displays) information as a screen of a graphical user interface (GUI) that can be operated by an operator. The output unit 340 may be included in the housing of the client device 110 or it may be externally attached. More specifically, the output unit 340 may be implemented as a display device such as a liquid crystal display, an organic EL (Electron-Luminescence) display, or a plasma display. It is preferable that these display devices be used according to the type of client device 110.

[0026] The communications unit 350 connects the client device 110 to the network 150 and manages communication with other devices.

[0027] The hardware configuration of client devices 120 and 130 is the same as that of client device 110. In the following, when referring to client devices 110, 120, and 130 collectively, they will simply be referred to as "client device."

[0028] For the purposes of this explanation, we will use a notebook PC (Personal Computer) as an example of a client device. However, the client device may also be a smartphone, tablet computer, desktop computer, etc.

[0029] 3. Information Processing The information processing of Embodiment 1 will be described below.

[0030] (1) Overview of the process The control unit 210 of the server device 100 receives an email sent from the issuer of the document data. The email is an example of a message. The email contains a URL (Uniform Resource Locator) that indicates the location of the document data stored on the Web. The URL is an example of storage location information. The control unit 210 extracts a URL from the email. The control unit 210 retrieves authentication information registered in association with the issuer. Authentication information is an example of login information for accessing the storage location indicated by the URL. The control unit 210 displays a graphical user interface component (hereinafter referred to as a GUI component) that automatically logs into a storage location on the Web on a predetermined screen displayed on the display of the client device 130. An example of a GUI component is a button. If a GUI component is selected, the control unit 210 automatically logs in to the web storage location indicated by the URL, based on the URL and authentication information. "Automatically" can also be interpreted as "without requiring the operator to enter authentication information to log in to the web storage location where the evidence data is stored." A web-based storage location indicated by a URL can also be described as a system or similar entity that provides a web-based storage location indicated by a URL.

[0031] By performing this type of processing, it is possible to provide a secure proxy service for processing evidence.

[0032] (2) Details of the process (2-0) Prerequisites The client device 110 transmits authentication information entered via a screen or other means to the server device 100. The control unit 210 of the server device 100 authenticates the user based on the entered authentication information. This authentication information is the authentication information required to log in to the information processing system 1000.

[0033] The control unit 210 issues an email address for each issuer of the document data in response to user settings operations via a predetermined screen from the client device 110. The issuer of the document data is the person who issues the document data to the user. The issuer may be a business partner company or a department within a company. In other words, even within the same company, different departments will each be issued their own email address. This process is an example of the process of issuing address information to an issuer. Note that the email address is just an example of address information. The email address issued by the control unit 210 can also be considered identification information that uniquely identifies the issuer of the document data. The issuer may also be the user's business partner. Hereafter, the issuer will also be referred to as a business partner. The control unit 210 associates user identification information that identifies the user who requested the issuance of an email address, the email address of the issued email, and the issuer's (business partner's) information, and stores them as email data in a predetermined storage area such as the storage unit 220. The email sent to the email address issued by the control unit 210 undergoes the processing shown in the flowchart in Figure 4, which will be described later.

[0034] Furthermore, in response to requests from the client device 110 via a predetermined screen, the control unit 210 stores authentication information for logging into the web-based storage location where the issuer stores the certificate data, as authentication data in a predetermined storage area such as the storage unit 220, in association with the issuer's (business partner's) information. This process is an example of the process of registering authentication information in association with the issuer. The authentication information consists, for example, of a combination of user ID and password. Furthermore, the storage of authentication data may be performed by a server device other than server device 100. (2-1) Processing incoming emails Figure 4 is a flowchart showing an example of information processing related to receiving emails. In step S410, the control unit 210 determines whether or not it has received an email addressed to the issued email address. If the control unit 210 determines that it has received an email addressed to the issued email address, it proceeds to step S420. If the control unit 210 determines that it has not received an email addressed to the issued email address, it repeats the process in step S410.

[0035] In step S420, the control unit 210 extracts a URL from the body of the email. The URL is information indicating the location on the Web where the evidence data is stored. The process in step S420 is an example of a process for extracting a URL from an email sent to an address.

[0036] In step S430, the control unit 210 searches for multiple email data stored in the storage unit 220, etc., based on the recipient's email address of the received email, and identifies the issuer and user of the document data from the relevant email data. Based on the identified issuer of the document data, the control unit 210 searches for multiple authentication data stored in the storage unit 220, etc., and identifies the authentication information from the relevant authentication data. This process is an example of a process for obtaining authentication information registered in association with an issuer.

[0037] In step S440, the control unit 210 generates a job that includes the body of the email, the issuer of the document data, the user, the URL, authentication information, etc. The control unit 210 temporarily stores the generated job in a predetermined storage area such as the storage unit 220.

[0038] Once the processing in step S440 is complete, the control unit 210 returns to the processing in step S410. Each time an email is received at the issued email address, the process shown in the flowchart in Figure 4 is executed.

[0039] (2-1) Uploading of supporting document data Figure 5 is a flowchart showing an example of information processing related to the uploading of supporting document data. In step S510, the control unit 210 determines whether it has received a request from the client device 130 to display the work screen 600 by an operator, as shown in Figure 6, which will be described later. For example, when an operator logs into the information processing system 1000 via the client device 130 and performs a predetermined operation, a request to display the work screen 600 is sent to the server device 100. If the control unit 210 determines that it has received a request to display the work screen 600, it proceeds to step S520. If the control unit 210 determines that it has not received a request to display the work screen 600, it repeats the process in step S510.

[0040] In step S520, the control unit 210 selects the job of the corresponding user in response to a request from the client device 130 and generates a work screen 600 corresponding to the job. As described above, the job is temporarily stored in a predetermined storage area such as the storage unit 220. In step S530, the control unit 210 transmits the generated work screen to the client device 130 and controls it to display on the output section of the client device 130. In this specification, the server device 100 generates a screen and transmits it to the client device. The client device then receives the screen from the server device 100 and displays it on its output unit. However, the server device 100 may prepare the necessary data for the screen and send it to the client device. The client device may then generate the screen based on the data received from the server device 100 and display it on the output unit. This type of process is also an example of how the server device 100 displays a screen.

[0041] Figure 6 shows an example of the operator's work screen 600. As described above, the work screen 600 is the screen displayed on the client device 130 (operator terminal). The work screen 600 includes at least an "Automatic Login and Download" button 610 and an area 630. The "Automatic Login and Download" button 610 is a button that is displayed when the above-mentioned job has been generated. Area 630 is a display area that displays GUI components, etc., when uploading the evidence data file.

[0042] In step S540 of Figure 5, the control unit 210 determines whether the "Automatically log in and download" button 610 has been selected on the work screen 600. If the "Automatically log in and download" button 610 has been selected, the control unit 210 proceeds to step S550. If the control unit 210 determines that the "Automatically log in and download" button 610 has not been selected, it repeats the process in step S540.

[0043] In step S550, the control unit 210 automatically logs in to the web storage location indicated by the URL, using the URL and authentication information included in the job that corresponds to the work screen 600 displayed on the client device 130. In other words, the control unit 210 automatically logs in to the web storage location indicated by the URL based on the URL and authentication information, without displaying the authentication information on the client device 130, which is the operator terminal.

[0044] In step S560, the control unit 210 determines whether or not it successfully logged in to the web storage location indicated by the URL. If the control unit 210 determines that it successfully logged in to the web storage location indicated by the URL, it proceeds to step S580. If the control unit 210 determines that it failed to successfully log in to the web storage location indicated by the URL, it proceeds to step S570. The control unit 210 may determine that automatic login has failed when it receives information such as an authentication error from a system or other location on the Web, or it may determine that automatic login has failed based on input from an operator via a predetermined screen or the like.

[0045] In step S570, the control unit 210 creates a message containing information indicating that login failed and sends it to the user's client device 110. Step S570 is an example of a process that sends information to the user indicating that login failed if automatic login fails.

[0046] In step S580, the control unit 210 downloads the document data from the web storage location indicated by the logged-in URL. More specifically, a pop-up window containing a download button for downloading the document data stored in the web storage location indicated by the logged-in URL is superimposed on the work screen 600. The pop-up window containing the download button may be displayed by the control unit 210 or by the web system indicated by the logged-in URL. When the operator selects the download button, the control unit 210 downloads the document data corresponding to the download button from the web storage location indicated by the logged-in URL. Step S580 is an example of a process that downloads the evidence data from the storage location if the automatic login is successful.

[0047] In step S590, the control unit 210 uploads (or stores) the downloaded document data to a predetermined storage area of ​​the management system for managing document data (server device 100 in the example of the specification). More specifically, once the download is complete, the control unit 210 displays a GUI component, such as a checkbox, in area 630 to confirm the download. The GUI component may be, for example, a checkbox displayed in association with a string such as "Has the target document data been downloaded correctly?". When the checkbox is checked, the control unit 210 uploads the downloaded document data to a predetermined storage area of ​​the management system for managing document data. The process in step S590 is an example of a process in which evidence data is uploaded to a management system that manages evidence data based on a predetermined operation via an operator terminal. Furthermore, the control unit 210 may determine whether or not the evidence data was downloaded after the processing in step S580, and if it determines that the evidence data was downloaded, it may proceed with the processing in step S590. For example, the control unit 210 may determine whether or not the evidence data was downloaded based on whether or not the evidence data exists (is stored) in a predetermined storage area, or it may determine whether or not the evidence data was downloaded based on input from the operator via a predetermined screen or the like.

[0048] In step S595, the control unit 210 associates the information of the issuer of the document data and the user (recipient of the document data) with the document data and stores it. Step S595 is an example of a process that associates and stores the recipient and issuer with the uploaded document data.

[0049] According to the processing in Embodiment 1, a document processing service can be provided without displaying authentication information such as user ID and password on the operator terminal.

[0050] (Variation 1) Modification 1 of Embodiment 1 will now be described. Configurations and processes not described in Modification 1 are the same as those in Embodiment 1. Modification 1 is included in Embodiment 1 and is not different from Embodiment 1.

[0051] In Modification 1, the control unit 210 extracts instruction information regarding the document data from the issuer to the recipient, which is contained in the email. The control unit 210 then displays the instruction information on the operator's work screen 600 in Modification 1.

[0052] Figure 7 shows an example of the operator's work screen 600 in Modification 1. Compared to Figure 6, Figure 7 has an additional display area 710. The display area 710 displays instruction information regarding the document data from the issuer to the recipient, as contained in the email. In the example in Figure 7, it is indicated that the downloadable (evidence data) is for September.

[0053] For example, the control unit 210 generates a script that includes the body of the email and a statement that it will extract from the email body the instructions from the issuer of the document data to the recipient of the document data. The control unit 210 sends the generated script to a large-scale language model that is connected to the server device 100 in a communicative manner. The control unit 210 displays the text output from the large-scale language model on the operator's work screen 600 in the modified example 1 as instruction information regarding the document data from the issuer to the recipient, which is contained in the email. The large-scale language model is a trained model that has been trained on a large-scale language model. An example of a large-scale language model is ChatGPT.

[0054] According to the processing method of Modification 1, confidential information such as authentication information and the issuer and recipient of the document data can be displayed on the operator terminal without displaying them on the operator terminal. As a result, the document processing service can be provided without fail.

[0055] <Note> The product may be provided in any of the following embodiments. (Note 1) An information processing method performed by an information processing system, Received a message sent from the issuer of the supporting document data. The aforementioned message includes storage location information indicating the location where the aforementioned document data is stored on the Web. The storage location information is extracted from the aforementioned message, Obtain the authentication information registered in association with the aforementioned issuer, A graphical user interface component for logging into the web-based storage location indicated by the aforementioned storage location information is displayed on a predetermined screen of the operator terminal. When the graphical user interface component is selected, the system logs in to the storage location on the Web indicated by the storage location information based on the storage location information and the authentication information. Information processing methods. (Note 2) The information processing method described in Appendix 1, When the graphical user interface component is selected, the operator logs in to the storage location on the Web indicated by the storage location information based on the storage location information and the authentication information, without displaying the authentication information on the screen of the operator terminal. Information processing methods. (Note 3) The information processing method described in Appendix 1 or Appendix 2, If the login is successful, the operator's terminal will display a screen that allows the user to download the document data from the storage location. Information processing methods. (Note 4) An information processing method described in any one of the appendices 1 to 3, If login fails, send information indicating that the login failed. Information processing methods. (Note 5) An information processing method described in any one of the appendices 1 to 4, Register authentication information in association with the aforementioned issuer. Information processing methods. (Note 6) The information processing method described in Appendix 5, The issuer is issued address information, The storage location information is extracted from the message sent to the aforementioned address information. Obtain the authentication information registered in association with the aforementioned issuer. Information processing methods. (Note 7) An information processing method described in any one of the appendices 1 to 6, Based on a predetermined operation via the operator terminal, the document data is uploaded to a management system that manages the document data. Information processing methods. (Note 8) The information processing method described in Appendix 7, The recipient of the aforementioned message is a user of the aforementioned management system. Information processing methods. (Note 9) The information processing method described in Appendix 8, The recipient and the issuer are stored in association with the uploaded document data. Information processing methods. (Note 10) An information processing method described in any one of the appendices 1 to 9, Extract the instruction information regarding the document data from the issuer to the recipient of the document data as stated in the message, The instruction information is displayed on a predetermined screen of the operator terminal. Information processing methods. (Note 11) An information processing system, Having at least one control unit, The control unit, Received a message sent from the issuer of the supporting document data. The aforementioned message includes storage location information indicating the location where the aforementioned document data is stored on the Web. The storage location information is extracted from the aforementioned message, Obtain the authentication information registered in association with the aforementioned issuer, A graphical user interface component for logging into the web-based storage location indicated by the aforementioned storage location information is displayed on a predetermined screen of the operator terminal. When the graphical user interface component is selected, the system logs in to the storage location on the Web indicated by the storage location information based on the storage location information and the authentication information. Information processing system. (Note 12) It is a program, On the computer, A program for executing the information processing method described in any one of the appendices 1 through 10.

[0056] While various embodiments of the present invention have been described, these are presented as examples only and are not intended to limit the scope of the invention. Novel embodiments can be implemented in a variety of other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. Embodiments and variations thereof are included in the scope and spirit of the invention, as well as in the claims and their equivalents. [Explanation of Symbols]

[0057] 100: Server device 110: Client device 150: Network 210: Control Unit 220: Storage section 230: Communications Department 1000: Information Processing System

Claims

1. An information processing method performed by an information processing system, Received a message sent from the issuer of the supporting document data. The aforementioned message includes storage location information indicating the location on the Web where the evidence data is stored. The storage location information is extracted from the aforementioned message, Obtain the authentication information registered in association with the aforementioned issuer, A graphical user interface component for logging into the storage location on the Web, as indicated by the aforementioned storage location information, is displayed on a predetermined screen of the operator terminal. When the graphical user interface component is selected, the user logs in to the storage location on the Web indicated by the storage location information based on the storage location information and the authentication information. Information processing methods.

2. The information processing method according to claim 1, When the graphical user interface component is selected, the user logs in to the storage location on the Web indicated by the storage location information, based on the storage location information and the authentication information, without displaying the authentication information on the screen of the operator terminal. Information processing methods.

3. The information processing method according to claim 1, If the login is successful, the operator's terminal will display a screen that allows the user to download the document data from the storage location. Information processing methods.

4. The information processing method according to claim 1, If login fails, send information indicating that the login failed. Information processing methods.

5. The information processing method according to claim 1, Register authentication information in association with the aforementioned issuer. Information processing methods.

6. The information processing method according to claim 5, The issuer is issued address information, The storage location information is extracted from the message sent to the aforementioned address information. Obtain the authentication information registered in association with the aforementioned issuer. Information processing methods.

7. The information processing method according to claim 1, Based on a predetermined operation via the operator terminal, the document data is uploaded to a management system that manages the document data. Information processing methods.

8. The information processing method according to claim 7, The recipient of the aforementioned message is a user of the aforementioned management system. Information processing methods.

9. The information processing method according to claim 8, The recipient and the issuer are stored in association with the uploaded document data. Information processing methods.

10. The information processing method according to claim 1, Extract the instruction information regarding the document data from the issuer to the recipient of the document data as stated in the message, The instruction information is displayed on a predetermined screen of the operator terminal. Information processing methods.

11. An information processing system, Having at least one control unit, The control unit, Received a message sent from the issuer of the supporting document data. The aforementioned message includes storage location information indicating the location on the Web where the evidence data is stored. The storage location information is extracted from the aforementioned message, Obtain the authentication information registered in association with the aforementioned issuer, A graphical user interface component for logging into the storage location on the Web, as indicated by the aforementioned storage location information, is displayed on a predetermined screen of the operator terminal. When the graphical user interface component is selected, the user logs in to the storage location on the Web indicated by the storage location information based on the storage location information and the authentication information. Information processing system.

12. It is a program, On the computer, A program for causing the information processing method described in any one of claims 1 to 10.

Images