Notification system, notification method, and notification program

Abstract

To enable a source of delivery to confirm the state of electronic data actually delivered to a destination. [Solution] A notification system having a first terminal device connected to an internal network isolated from an external network, a second terminal device connected to the external network, and a server device connected to the internal network and the external network, wherein a processor provided in the first terminal device acquires notification item information indicating information about the target notification item and uploads electronic data created based on the notification item information to the server device, a processor provided in the second terminal device downloads the electronic data from the server device, and a processor provided in the server device provides the electronic data uploaded from the first terminal device to the first terminal device.

Description

[Technical field]

[0001] The present invention relates to a notification system, a notification method, and a notification program. [Background technology]

[0002] Patent document 1 states that "We provide a notification server, notification management system, notification management method, and program that can prevent misdelivery and reduce the hassle involved when sending notifications to recipients who wish to receive them electronically."

[0003] Patent Document 2 states that "neutralization processing refers to processing that reduces the risk of damage caused by malware contained in the original file at the file transfer destination, for example by deleting programs such as macros contained in the file."

[0004] Patent document 3 states that "The communication neutralization unit 35 notifies the destination on LGWAN 5 of the text information and provides the text information using WEB server 37 and DB server 36 as described below. The back-end server 3 extracts the text information from the contents of the attachment and provides only the text information to the destination within the business network 60, thereby neutralizing the malicious attachment." [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2022-187568 A [Patent Document 2] JP 2020-126385 A [Patent Document 3] JP 2020-031293 A Summary of the Invention [Problem to be solved by the invention]

[0006] Conventionally, notification systems capable of distributing notifications in the form of electronic data have been known (see, for example, Patent Document 1). In such notification systems, there is a need for the source of distribution to check the electronic data when a part of the contents of the electronic data is dynamically replaced or when an inquiry is received regarding the contents of the electronic data. However, Patent Document 1 allows data to be uploaded from the source of distribution to a server, but does not assume any downward data transfer from the server to the source of distribution. Therefore, Patent Document 1 does not allow the source of distribution to check the state of the electronic data that is actually distributed to the destination.

[0007] Also, conventionally, there is known a server that sanitizes a file acquired from an external network and transfers it to an internal network. (See, for example, Patent Documents 2 and 3). However, Patent Documents 2 and 3 only consider files acquired from an external network as transfer targets, and do not assume that files acquired from an internal network will be transferred back to the internal network. Furthermore, in Patent Documents 2 and 3, since files are sanitized, the state of the data changes before it is imported into the internal network. Therefore, even in Patent Documents 2 and 3, the source of electronic data cannot confirm the state of the data that is actually delivered to the destination.

[0008] The present disclosure has been made in consideration of the above circumstances, and aims to provide a system, method, and program that allows the source of electronic data to check the state of the data that will actually be delivered to the destination. [Means for solving the problem]

[0009] A notification system according to a first aspect of the present disclosure has a first terminal device connected to an internal network isolated from an external network, a second terminal device connected to the external network, and a server device connected to the internal network and the external network, wherein a processor provided in the first terminal device acquires notification item information indicating information about a target notification item and uploads electronic data created based on the notification item information to the server device, a processor provided in the second terminal device downloads the electronic data from the server device, and a processor provided in the server device provides the electronic data uploaded from the first terminal device to the first terminal device.

[0010] A notification system according to a second aspect of the present disclosure is the notification system according to the first aspect, wherein the processor included in the first terminal device adds a digital signature to the electronic data prior to the upload.

[0011] A notification system according to a third aspect of the present disclosure is the notification system according to the second aspect, wherein the processor of the server device provides the electronic data to which the electronic signature has been attached to the first terminal device without rendering it harmless.

[0012] A notification system according to a fourth aspect of the present disclosure is the notification system according to the second or third aspect, wherein the processor provided in the first terminal device applies an electronic seal to the electronic data prior to applying the electronic signature.

[0013] A notification system according to a fifth aspect of the present disclosure is a notification system according to the fourth aspect, in which the processor provided in the first terminal device applies the electronic seal so that it at least partially overlaps with a text describing the contents of the notification.

[0014] A notification system according to a sixth aspect of the present disclosure is the notification system according to the fifth aspect, wherein the processor provided in the first terminal device allows the uploading of only the electronic data in which the application of at least one of the electronic seal and the electronic signature meets predetermined criteria.

[0015] A notification system according to a seventh aspect of the present disclosure is a notification system according to any one of the first to sixth aspects, wherein the internal network is a network exclusively for administrative use, and the external network is the Internet.

[0016] A notification system according to an eighth aspect of the present disclosure is the notification system according to the seventh aspect, wherein the processor provided in the first terminal device obtains application data entered by the applicant when applying for the notification item from the application system, obtains the notification item information from a resident database that stores information about residents, and checks the electronic data created based on the notification item information by matching the application data with the electronic data.

[0017] A notification system according to a ninth aspect of the present disclosure is a notification system according to the eighth aspect, in which a processor provided in the first terminal device combines the electronic data with delivery destination information included in the application data depending on the result of the check.

[0018] A notification system according to a tenth aspect of the present disclosure is the notification system according to the eighth or ninth aspect, wherein when the electronic data is downloaded by the second terminal device, the processor provided in the server device communicates with the application system to notify the application system that the electronic data has been opened.

[0019] A notification system according to an eleventh aspect of the present disclosure is a notification system according to any one of the first to tenth aspects, wherein a processor provided in the server device stores the electronic data uploaded from the first terminal device, and, when the electronic data becomes available for distribution, notifies the second terminal device that the electronic data is available for download.

[0020] A notification system according to a twelfth aspect of the present disclosure is a notification system according to any one of the first to eleventh aspects, in which the processor provided in the server device submits the electronic data to a third terminal device different from the first terminal device and the second terminal device.

[0021] A notification method according to a thirteenth aspect of the present disclosure, in a notification system having a first terminal device connected to an internal network isolated from an external network, a second terminal device connected to the external network, and a server device connected to the internal network and the external network, comprises the first terminal device acquiring notification item information indicating information of a target notification item, uploading electronic data created based on the notification item information to the server device, the second terminal device downloading the electronic data from the server device, and the server device providing the electronic data uploaded from the first terminal device to the first terminal device.

[0022] A notification program according to a fourteenth aspect of the present disclosure, in a notification system having a first terminal device connected to an internal network isolated from an external network, a second terminal device connected to the external network, and a server device connected to the internal network and the external network, causes the first terminal device to perform a process of obtaining notification item information indicating information about a target notification item and a process of uploading electronic data created based on the notification item information to the server device, causes the second terminal device to perform a process of downloading the electronic data from the server device, and causes the server device to perform a process of providing the electronic data uploaded from the first terminal device to the first terminal device. Effect of the Invention

[0023] According to the communication system, communication method, and communication program of the present disclosure, the source of delivery can check the state of electronic data that is actually delivered to the destination. [Brief description of the drawings]

[0024] [Figure 1] FIG. 1 is a diagram showing an example of a schematic configuration of a notification system 10 according to an embodiment of the present invention. [Diagram 2] 1 is a diagram illustrating an example of a hardware configuration of a terminal device 1000 according to the present embodiment. [Diagram 3] FIG. 2 is a diagram illustrating an example of a hardware configuration of a server device 2000 according to the present embodiment. [Figure 4] FIG. 1 is a diagram illustrating an example of a functional configuration of a first terminal device 1100 according to the present embodiment. [Diagram 5] FIG. 12 is a diagram illustrating an example of a functional configuration of a second terminal device 1200 according to the present embodiment. [Figure 6] FIG. 13 is a diagram illustrating an example of a functional configuration of a third terminal device 1300 according to the present embodiment. [Figure 7] FIG. 2 is a diagram illustrating an example of a functional configuration of a second server device 2200 according to the present embodiment. [Figure 8] FIG. 2 is a diagram showing an example of a flow of a notification process in the notification system 10 according to the present embodiment. [Figure 9] FIG. 2 is a diagram showing an example of a flow of a notification process in the notification system 10 according to the present embodiment. [Figure 10] FIG. 2 is a diagram showing an example of a flow of a notification process in the notification system 10 according to the present embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0025] Hereinafter, an example of an embodiment of the present disclosure will be described with reference to the drawings. In each drawing, the same or equivalent components and parts are given the same reference numerals. In addition, the dimensional ratios of the drawings are exaggerated for the convenience of explanation and may differ from the actual ratios.

[0026] 1 is a diagram showing an example of a schematic configuration of a notification system 10 according to the present embodiment. The notification system 10 includes a first terminal device 1100, a second terminal device 1200, a third terminal device 1300, and a server device 2000. When there is no particular need to distinguish between them, the first terminal device 1100, the second terminal device 1200, and the third terminal device 1300 will be collectively referred to as the terminal device 1000.

[0027] A first terminal device 1100 is connected to an internal network. A second terminal device 1200 and a third terminal device 1300 are connected to external networks. A server device 2000 is connected to the internal network and the external network.

[0028] Here, the internal network is a network available within a limited range, and may be, for example, a closed network. An example of such a closed network is a network exclusively used by the government. In the following, we will explain an example in which the internal network is a LGWAN (Local Government Wide Area Network), which is one of the networks exclusively used by the government, and the external network is the Internet.

[0029] The notification system 10 of the present disclosure has a high affinity for notifications between a closed network that requires a high level of security and a publicly available open network. However, the present disclosure is not limited to this. The internal network may be any network, such as a corporate network or a store network, and the external network may be any network separated from the internal network.

[0030] The first terminal device 1100 is a device that is a source of a notification, and may be, for example, a local government terminal used by a local government employee. The first terminal device 1100 may be, for example, a desktop personal computer. However, the first terminal device 1100 is not limited to this. The first terminal device 1100 may be any device that can be a source of a notification, such as a notebook computer, a tablet terminal, or a smartphone.

[0031] The second terminal device 1200 is a device to which the notification is delivered, and may be, for example, a resident terminal used by a resident. The second terminal device 1200 may be, for example, a smartphone. However, the present invention is not limited to this. The second terminal device 1200 may be any device to which the notification is delivered, such as a desktop computer, a notebook computer, or a tablet terminal.

[0032] The third terminal device 1300 is a device to which a notification item is to be submitted that is different from the first terminal device 1100 and the second terminal device 1200, and may be, for example, a third-party terminal used by a third party. The third terminal device 1300 may be, for example, a desktop personal computer. However, the third terminal device 1300 is not limited to this. The third terminal device 1300 may be any device to which a notification item can be submitted, such as a notebook computer, a tablet terminal, or a smartphone.

[0033] The server device 2000 is a device that stores various data including electronic data of notifications. As an example, the server device 2000 may be realized by cloud computing. In the following, an example will be described in which the server device 2000 is provided in a network environment of an LGWAN-ASP (Application Service Provider) that can be connected to an LGWAN. This allows the notification system 10 to be provided as a cloud-based service, which is less expensive than an on-premise service and allows users to start using the service immediately.

[0034] The server device 2000 may be composed of one or more devices. In this figure, a case is shown as an example in which the server device 2000 is composed of three devices, a first server device 2100, a second server device 2200, and a third server device 2300, based on the regulations of the local government when setting up a server. When there is no need to distinguish between them, the first server device 2100, the second server device 2200, and the third server device 2300 will be collectively referred to as the server device 2000.

[0035] The first server device 2100 is a server device for an internal network, and may be, for example, a server for a local government. A firewall may be provided between the first server device 2100 and the internal network.

[0036] The second server device 2200 is a server device provided between the first server device 2100 and the third server device 2300. A firewall may be provided between the second server device 2200 and the first server device 2100, and between the second server device 2200 and the third server device 2300.

[0037] The third server device 2300 is a server device for an external network, and may be, for example, a server for residents. A firewall may be provided between the third server device 2300 and the external network.

[0038] In such a server configuration, the second server device 2200 may mainly perform the processing of the server device 2000. In this case, the first server device 2100 may perform data transfer processing between the internal network and the second server device 2200. Similarly, the third server device 2300 may perform data transfer processing between the external network and the second server device 2200. However, this is not limited to this. At least a part of the processing performed by the second server device 2200 may be performed by the first server device 2100 or the third server device 2300 instead.

[0039] 2 is a diagram showing an example of a hardware configuration of a terminal device 1000 according to this embodiment. The terminal device 1000 includes a processor 1001, a read only memory (ROM) 1002, a random access memory (RAM) 1003, a storage 1004, a communication interface 1005, and a user interface 1006. These components are connected to each other via a bus 1009 so as to be able to communicate with each other.

[0040] The processor 1001 executes various programs and controls each component. Here, it is assumed that the processor 1001 is a CPU (Central Processing Unit). The ROM 1002 stores various programs and various data. The RAM 1003 temporarily stores programs or data as a working area. The storage 1004 is composed of an HDD (Hard Disk Drive) or an SSD (Solid State Drive), and stores various programs including an operating system and various data.

[0041] In the terminal device 1000 according to this embodiment, a notification program is stored in the ROM 1002 or the storage 1004. The processor 1001 reads the notification program from the ROM 1002 or the storage 1004 and executes it using the RAM 1003 as a working area, thereby controlling each component and executing various arithmetic processing in accordance with the notification program.

[0042] The communication interface 1005 is an interface for the terminal device 1000 to communicate with other devices. The user interface 1006 is an input / output interface for the terminal device 1000 to exchange information with a user. The user interface 1006 may include a mouse, keyboard, touch panel, microphone, etc. as input devices, and a monitor, speaker, etc. as output devices.

[0043] Here, when it is necessary to distinguish between the hardware configurations of the first terminal device 1100 to the third terminal device 1300, the configuration of the first terminal device 1100 is given the suffix T1, the configuration of the second terminal device 1200 is given the suffix T2, and the configuration of the third terminal device 1300 is given the suffix T3. That is, for example, the processor 1001 of the first terminal device 1100 is defined as the processor 1001_T1, the processor 1001 of the second terminal device 1200 is defined as the processor 1001_T2, and the processor 1001 of the third terminal device 1300 is defined as the processor 1001_T3.

[0044] 3 is a diagram showing an example of the hardware configuration of a server device 2000 according to this embodiment. The server device 2000 includes a processor 2001, a ROM 2002, a RAM 2003, a storage 2004, and a communication interface 2005. These components are connected via a bus 2009 so as to be able to communicate with each other.

[0045] The processor 2001, ROM 2002, RAM 2003, storage 2004, and communication interface 2005 of the server device 2000 may be similar to the processor 1001, ROM 1002, RAM 1003, storage 1004, and communication interface 1005 of the terminal device 1000, so duplicated explanations will be omitted here.

[0046] Furthermore, when it is necessary to distinguish between the hardware configurations of the first server device 2100 to the third server device 2300, the configuration of the first server device 2100 is given a suffix S1, the configuration of the second server device 2200 is given a suffix S2, and the configuration of the third server device 2300 is given a suffix S3. That is, for example, the processor 2001 of the first server device 2100 is defined as processor 2001_S1, the processor 2001 of the second server device 2200 is defined as processor 2001_S2, and the processor 2001 of the third server device 2300 is defined as processor 2001_S3.

[0047] 4 is a diagram showing an example of a functional configuration of the first terminal device 1100 according to this embodiment. The first terminal device 1100 includes an application data acquisition unit 1110, a notification information acquisition unit 1120, an electronic data creation unit 1130, a sorting unit 1140, a matching unit 1150, an electronic seal imprint assignment unit 1160, an electronic signature assignment unit 1170, an upload unit 1180, and a display unit 1190. These functional configurations may be realized by the processor 1001_T1 reading out a notification program from the ROM 1002_T1 or the storage 1004_T1, expanding the program in the RAM 1003_T1, and executing the program.

[0048] The application data acquisition unit 1110 acquires, from the application system, the application data entered by the applicant when applying for the notification item.

[0049] The notification information acquisition unit 1120 acquires notification information indicating information on the target notification. At this time, the notification information acquisition unit 1120 acquires the notification information from a resident database that stores information on residents.

[0050] The electronic data creation unit 1130 creates electronic data of the notification item based on the notification item information.

[0051] The sorting unit 1140 sorts the created electronic data.

[0052] The matching unit 1150 checks the electronic data by matching the electronic data created based on the notification information with the application data. Then, the matching unit 1150 combines the electronic data with the delivery destination information included in the application data according to the check result.

[0053] Prior to the addition of an electronic signature, the electronic seal imprint adding unit 1160 adds an electronic seal to the electronic data. At this time, the electronic seal imprint adding unit 1160 adds the electronic seal so that at least a part of the electronic seal imprint overlaps with the text describing the contents of the notification.

[0054] The digital signature adding unit 1170 adds a digital signature to the digital data prior to uploading.

[0055] The upload unit 1180 uploads the electronic data created based on the notification information to the server device 2000. At this time, the upload unit 1180 allows uploading of only electronic data in which at least one of an electronic seal imprint and an electronic signature satisfies a predetermined standard.

[0056] The display unit 1190 displays various information provided by the server device 2000 .

[0057] 5 is a diagram showing an example of a functional configuration of the second terminal device 1200 according to this embodiment. The second terminal device 1200 includes a download unit 1210, a request unit 1220, and a verification result receiving unit 1230. These functional configurations may be realized by the processor 1001_T2 reading out a notification program from the ROM 1002_T2 or the storage 1004_T2, expanding it in the RAM 1003_T2, and executing it.

[0058] The download unit 1210 downloads electronic data from the server device 2000 .

[0059] The request unit 1220 requests the server device 2000 to submit the electronic data to a third terminal device 1300 that is different from the first terminal device 1100 and the second terminal device 1200 .

[0060] The verification result receiving unit 1230 receives from the server device 2000 the result of the third terminal device 1300 verifying the electronic data.

[0061] 6 is a diagram showing an example of a functional configuration of a third terminal device 1300 according to this embodiment. The third terminal device 1300 includes an electronic data receiving unit 1310, a verification unit 1320, and a verification result reporting unit 1330. These functional configurations may be realized by the processor 1001_T3 reading out a notification program from the ROM 1002_T3 or the storage 1004_T3, expanding the program in the RAM 1003_T3, and executing the program.

[0062] The electronic data receiving unit 1310 receives electronic data from the server device 2000 .

[0063] The verification unit 1320 verifies the received electronic data.

[0064] The verification result reporting unit 1330 reports the result of verifying the electronic data to the server device 2000 .

[0065] 7 is a diagram showing an example of a functional configuration of the second server device 2200 according to this embodiment. The second server device 2200 includes a storage unit 2210, a notification unit 2220, a distribution unit 2230, a linking unit 2240, an opening status providing unit 2250, an electronic data providing unit 2260, a submission unit 2270, and a verification result communication unit 2280. These functional configurations may be realized by the processor 2001_S2 reading out a notification program from the ROM 2002_S2 or the storage 2004_S2, expanding the program in the RAM 2003_S2, and executing the program.

[0066] The storage unit 2210 stores electronic data uploaded from the first terminal device 1100 .

[0067] When the electronic data becomes available for distribution, the notification unit 2220 notifies the second terminal device 1200 that the electronic data is available for download.

[0068] The distribution unit 2230 distributes the electronic data to the second terminal device 1200.

[0069] When electronic data is downloaded by the second terminal device 1200, the linking unit 2240 links with the application system to notify the application system that the electronic data has been opened.

[0070] The opening status providing unit 2250 provides the first terminal device 1100 with the opening status of the electronic data.

[0071] The electronic data providing unit 2260 provides the electronic data uploaded from the first terminal device 1100 to the first terminal device 1100. At this time, the electronic data providing unit 2260 provides the electronic data to which a digital signature has been added to the first terminal device without sanitizing the data.

[0072] The submitting unit 2270 submits the electronic data to a third terminal device 1300 that is different from the first terminal device 1100 and the second terminal device 1200 .

[0073] The verification result notification unit 2280 notifies the second terminal device 1200 of the result of the third terminal device 1300 verifying the electronic data.

[0074] The notification process in the notification system 10, in which the terminal device 1000 and the server device 2000 are equipped with such functional units, will be described in detail using a flow chart. In explaining the flow chart, an example will be given in which, as part of administrative procedures, a notification of the disposition of an admission acceptance letter in response to an application for admission to a nursery school is notified electronically in addition to the conventional mail notification.

[0075] Fig. 8 is a diagram showing an example of the flow of notification processing in the notification system 10 according to the present embodiment. This flow may be executed in the notification system 10 having a first terminal device 1100 connected to an internal network separated from an external network, a second terminal device 1200 and a third terminal device 1300 connected to the external network, and a server device 2000 connected to the internal network and the external network, as shown in Fig. 1.

[0076] In step S110, the processor 1001_T1, as the application data acquisition unit 1110, acquires application data entered by the applicant when applying for the notification from the application system. More specifically, the processor 1001_T1 may acquire, as the application data, applicant information for identifying the applicant, delivery destination information indicating the delivery destination of the notification, and additional information related to the application.

[0077] Here, the applicant information may include, for example, information on the applicant's name. Alternatively or in addition to this, the applicant information may include information such as the applicant's address, postal code, date of birth, gender, and personal number.

[0078] The destination information may include, for example, information on the email address of the second terminal device 1200 to which the notification is to be delivered. In the above description, an email address is used as the destination, but the present invention is not limited to this. The destination may be any information that can be the destination of an electronic notification, such as a telephone number that can use SMS (Short Message Service) and a messaging app account.

[0079] The additional information may also include a selection as to whether notification by mail or electronic notification is desired.

[0080] The processor 1001_T1 may acquire application data including, for example, such applicant information, distribution destination information, and additional information in a file format separated into multiple fields, for example, a CSV (Comma-Separated Values) file format.

[0081] The processor 1001_T1 may pre-process the acquired application data to facilitate the subsequent sorting and matching processes. Examples of such pre-processing include sorting (e.g., alphabetical order), character conversion (e.g., full-width / half-width conversion), normalization (e.g., obtaining a postal code from an address), and cleansing (e.g., eliminating spelling variations).

[0082] In step S120, the processor 1001_T1, as the notification information acquisition unit 1120, acquires notification information indicating information on the target notification. At this time, the processor 1001_T1 may acquire the notification information from a resident database that stores information on residents. More specifically, the processor 1001_T1 may acquire, as the notification information, resident information that identifies the resident who is the target of the notification and content information that indicates the notification content for each resident.

[0083] Here, the resident information may be information recorded on a resident's card, and may include, for example, information on the resident's name. Alternatively or in addition to this, the resident information may include information such as the resident's address, postal code, date of birth, gender, and individual number.

[0084] The content information may also include information indicating the result of the disposition for each resident. For example, when notifying the disposition of the admission consent form, the content information may include information on whether the admission was approved and information such as the name of the approved nursery school.

[0085] The processor 1001_T1 may acquire, for example, such resident information and notification information including content information in a file format divided into multiple fields, for example, in a CSV file format.

[0086] The processor 1001_T1 may then pre-process the acquired notification information, similar to the application data, to make it easier to execute subsequent sorting and matching processes.

[0087] In step S130, the processor 1001_T1, as the electronic data creation unit 1130, creates electronic data of the notification based on the notification information acquired in step S120. More specifically, the processor 1001_T1 may use typesetting software to arrange the resident information and content information included in the notification information according to a predetermined layout, thereby creating one document file, for example, a PDF (Portable Document Format) file, in which the notification contents of all residents who are the target recipients of the notification are described.

[0088] Then, the processor 1001_T1 may perform text analysis on the PDF file and divide it into PDF files for each resident. At this time, the processor 1001_T1 may, for example, predetermine a keyword or specific character that will be a trigger for dividing the file, and divide the PDF file each time the keyword or specific character is found in the results of the text analysis of the PDF file. The processor 1001_T1 may then extract the resident's name from the divided PDF files, and rename the PDF file so that the resident's name is included in the file name. In this way, for example, the processor 1001_T1 creates electronic data of the notification, here a PDF file, for each resident.

[0089] In step S140, the processor 1001_T1, as the sorting unit 1140, sorts the electronic data created in step S130. For example, if the notification means is predetermined depending on the type of notification content, the processor 1001_T1 may sort whether the electronic data is to be notified by mail or electronically depending on the notification content. Also, if the applicant selected whether they wanted to be notified by mail or electronically at the time of application, the processor 1001_T1 may sort whether the electronic data is to be notified by mail or electronically based on the application data and electronic data.

[0090] The electronic data sorted as a mailed notification may be provided to a printer for printing, whereas the electronic data sorted as an electronic notification may be subject to further processing.

[0091] In step S150, the processor 1001_T1, as the matching unit 1150, matches the electronic data created based on the notification information in step S130 with the application data acquired in step S110 to check the electronic data. As described above, the application data is data acquired from the application system. On the other hand, the notification information on which the electronic data was created is information acquired from the resident database. In this way, the application data and the notification information have different sources. Therefore, the processor 1001_T1 checks the electronic data by matching the two.

[0092] At this time, for example, the range and items for text analysis of the PDF file, which is electronic data, may be specified in advance. This allows the processor 1001_T1 to extract various items such as the name and address of the resident who is the target of the notification from the specified range of the PDF file. At this time, in order to make it easier to understand the correspondence between the specified location and the item name in the document, the processor 1001_T1 may color the specified position in the document. Also, if the information of the resident who is the target of the notification cannot be extracted from the specified range, the processor 1001_T1 may display an error.

[0093] If the result of the matching shows that the two are consistent, the processor 1001_T1 combines the PDF file, which is electronic data, with the destination information, in this case, the email address of the second terminal device 1200. The processor 1001_T2 combines the electronic data with the destination information included in the application data in accordance with the result of the check, for example, in this manner. This makes it possible to prevent the electronic data from being distributed to unintended persons.

[0094] In addition, the conditions for merging can be specified in advance. For example, if the level of name matching can be adjusted, the processor 1001_T1 can change its behavior depending on the degree of matching. For example, if only external characters in the names are different, the matching results may be displayed as merging candidates. Also, if only the "family name" in the names is different, since it is highly likely that the name is a maiden name, the matching results may be displayed as merging candidates. This allows local government officials to manually select merging candidates. In this case, the processor 1001_T1 can display a list of "whether manual matching was performed" and "manually matched data" on the monitor. Also, if there are notifications with the same content due to duplicate applications, etc., the processor 1001_T1 can display a warning. Also, the processor 1001_T1 can output the matching check results in a form, and at this time, the applied merging conditions can also be output.

[0095] The processor 1001_T1 can create a list in which the file names of the electronic data correspond to the distribution destination information according to the result of the combination in this manner. Such a list may further include information on the distribution start date and time when the electronic data can be distributed. Such a list may also include status information indicating the opening status of the electronic data. The status information may be set to "unopened" at this point. In addition, the list may also include information to be written in the body of the notification to the resident, such as the resident's name and telephone number.

[0096] In step S160, the processor 1001_T1, functioning as the electronic seal imprinting unit 1160, imparts an electronic seal imprint to the electronic data prior to the impartation of an electronic signature. The electronic seal imprint may be an imitation of a seal impression. This allows an impression to be left on the electronic data in the same way as an actual seal, making it possible to omit the work of scanning the affixed seal and converting it into data again. In addition, since the electronic seal imprint is imparted prior to the impartation of the electronic signature, it is possible to prove that the electronic seal imprint was not added later.

[0097] At this time, the processor 1001_T1 may attach the electronic seal so that it at least partially overlaps with the text describing the contents of the notification. In other words, the processor 1001_T1 may intentionally overlap the characters and the electronic seal. This makes it possible to prevent, for example, when the electronic seal is attached to a blank portion, the image of that portion from being cut out and used for secondary purposes.

[0098] In step S170, the processor 1001_T1, as the electronic signature adding unit 1170, adds an electronic signature to the electronic data prior to uploading. At this time, the processor 1001_T1 may add an electronic signature to multiple pieces of electronic data at once. At this time, the processor 1001_T1 may add an electronic signature other than LGPKI (Local Government Public Key Infrastructure), or may add an LGPKI electronic signature and another electronic signature in a multiple manner.

[0099] In addition, when attaching the electronic signature, the processor 1001_T1 may, for example, compress the electronic data using a predetermined hash function to calculate a hash value. Then, the processor 1001_T1 may encrypt the calculated hash value with a private key to generate the electronic signature. The processor 1001_T1 may, for example, attach the electronic signature thus generated to the electronic data.

[0100] In this manner, in the notification system 10 according to this embodiment, the series of processes up to the application of an electronic signature to electronic data is completed within the first terminal device 1100 connected to the internal network, without going through an external network.

[0101] In step S180, the processor 1001_T1, functioning as the upload unit 1180, uploads the electronic data generated based on the notification information to the server device 2000. More specifically, the processor 1001_T1 may transmit the electronic data to which the electronic signature has been added in step S170 to the first server device 2100 via the internal network. In response to this, the processor 2001_S1 may transfer the electronic data with the electronic signature received from the first terminal device 1100 to the second server device 2200.

[0102] At this time, in cases where no electronic seal imprint is attached and only an electronic signature is attached, where no electronic signature is attached and only an electronic seal imprint is attached, where neither an electronic seal imprint nor an electronic signature is attached, or where an electronic seal imprint is attached on a blank portion, the processor 1001_T1 may prohibit the uploading of electronic data and display an error, or may return the process to the previous step and execute the attachment process again. In this way, for example, the processor 1001_T1 permits the uploading of only electronic data in which the attachment of at least one of an electronic seal imprint and an electronic signature meets a predetermined standard.

[0103] At this time, the processor 1001_T1 may upload the list created in step S150 to the server device 2000 together with the electronic data.

[0104] In step S190, the processor 2001_S2 stores the electronic data uploaded from the first terminal device 1100 in the storage unit 2210. At this time, the processor 2001_S2 may store a plurality of pieces of electronic data for each resident together with the list.

[0105] 9 is a diagram showing an example of the flow of notification processing in the notification system 10 according to the present embodiment. The flow of FIG. 9 may be executed as processing subsequent to the flow of FIG.

[0106] In step S200, the processor 2001_S2, as the notification unit 2220, notifies the second terminal device 1200 that the electronic data can be downloaded when the electronic data can be distributed. More specifically, the processor 2001_S2 may refer to the list stored in step S190. Then, when the distribution start date and time associated with the electronic data to be distributed has passed, the processor 2001_S2 may transmit a message addressed to the distribution destination associated with the electronic data, here, the email address of the second terminal device 1200, to the third server device 2300. In response to this, the processor 2001_S3 may transfer the message received from the second server device 2200 to the second terminal device 1200 via the external network.

[0107] In the above description, a case where the second terminal device 1200 is notified that the electronic data can be downloaded after the distribution start date and time has passed is shown as an example, but the present invention is not limited to this. After notifying the second terminal device 1200 that the electronic data can be downloaded, if the electronic data is not downloaded for a predetermined period of time, the processor 2001_S2 may notify the second terminal device 1200 again that the electronic data can be downloaded. Furthermore, if the number of times that the processor 2001_S2 notifies the second terminal device 1200 that the electronic data can be downloaded exceeds a predetermined threshold, the processor 2001_S2 may notify the first terminal device 1100 of the fact. Then, the processor 2001_S2 may provide the electronic data as it is to the first terminal device 1100, that is, return it. In this way, the staff of the local government may change the electronic data to be notified by mail instead of being notified electronically.

[0108] In step S210, the processor 1001_T2, as the download unit 1210, requests the server device 2000 to download electronic data. More specifically, the processor 1001_T2 may use a browser function to accept a user operation. When a user operation to download electronic data is input, the processor 1001_T2 may transmit a request specifying the file name of the electronic data to be downloaded to the third server device 2300 via an external network. In response to this, the processor 2001_S3 may transfer the request received from the second terminal device 1200 to the second server device 2200.

[0109] In step S220, the processor 2001_S2, as the distribution unit 2230, distributes the electronic data to the second terminal device 1200. More specifically, the processor 2001_S2 may search the database using the file name specified in the request received in step S210 as a key. Then, the processor 2001_S2 may transmit the searched electronic data to the third server device 2300. In response to this, the processor 2001_S3 may transfer the electronic data received from the second server device 2200 to the second terminal device 1200 via the external network.

[0110] In step S230, the processor 1001_T2 downloads electronic data from the server device 2000. A resident can download electronic data from the server device 2000, for example, by using a browser function in this manner. Note that the electronic data downloaded in this manner is often a notification from a local government and important information for the resident. Therefore, the processor 1001_T2 may have a function of aggregating only the electronic data that is a notification and displaying it on a monitor so that it is not buried in other information.

[0111] In step S240, the processor 1001_T2, as the linking unit 2240, links with the application system to the effect that the electronic data has been opened when the electronic data is downloaded by the second terminal device 1200. More specifically, the processor 1001_T2 may change the status information of the list from "unopened" to "opened" when the electronic data is downloaded in step S230. The processor 1001_T2 may also send a message to the first server device 2100 to the effect that the electronic data has been opened. Such a message may include information indicating the date and time when the electronic data was opened. In response to this, the processor 2001_S1 may transfer the message received from the second server device 2200 to the application system via the internal network.

[0112] In step S250, the processor 1001_T1 requests the server device 2000 to confirm the opening status of the electronic data. More specifically, the processor 1001_T1 may use a browser function to accept a user operation. When a user operation to confirm the opening status is input, the processor 1001_T1 may transmit a request specifying the file name of the electronic data for which the opening status is to be confirmed to the first server device 2100 via the internal network. In response to this, the processor 2001_S1 may transfer the request received from the first terminal device 1100 to the second server device 2200.

[0113] In step S260, the processor 2001_S2, as the opening status providing unit 2250, provides the opening status of the electronic data to the first terminal device 1100. In more detail, the processor 2001_S2 may search the list using the file name specified in the request received in step S250 as a key. Then, the processor 2001_S2 may transmit a message indicating status information of the searched electronic data to the first server device 2100. In response to this, the processor 2001_S1 may transfer the message received from the second server device 2200 to the first terminal device 1100 via the internal network.

[0114] In step S270, the processor 1001_T1 displays information indicating the opening status provided from the server device as the display unit 1190. A staff member of the local government can check whether the uploaded electronic data has been opened or not by using the function of the browser in this manner, for example.

[0115] In the above description, the process of steps S250 to S270 is executed after the electronic data is downloaded by the second terminal device 1200, but the present invention is not limited to this. The process of steps S250 to S270 may be executed at any timing after the electronic data is stored in step S190.

[0116] In the above description, a case where the opening status is checked by specifying specific electronic data has been shown as an example, but the opening status can also be checked without specifying electronic data. In this case, in step S250, the processor 1001_T1 may send a request without specifying the file name of the electronic data. In addition, in step S260, the processor 2001_S2 may send a message indicating status information of the plurality of stored electronic data. Then, in step S270, the processor 1001_T1 may display the status information of the plurality of electronic data. At this time, the processor 1001_T1 may display the opening rate, such as what percentage of the plurality of electronic data has been opened.

[0117] In step S280, the processor 1001_T1 requests the server device 2000 to transmit the contents of the electronic data. More specifically, the processor 1001_T1 may use a browser function to accept a user operation. When a user operation to check the contents of the transmission is input, the processor 1001_T1 may transmit a request specifying the file name of the electronic data whose contents are to be checked to the first server device 2100 via the internal network. In response to this, the processor 2001_S1 may transfer the request received from the first terminal device 1100 to the second server device 2200.

[0118] In step S290, the processor 2001_S2, as the electronic data providing unit 2260, provides the electronic data uploaded from the first terminal device 1100 to the first terminal device 1100. At this time, the processor 2001_S2 may provide the electronic data to which the electronic signature is attached to the first terminal device 1100 without sanitizing it. More specifically, the processor 2001_S2 may search the database using the file name specified in the request received in step S280 as a key. Then, the processor 2001_S2 may transmit the searched electronic data to the first server device 2100 as it is. In response to this, the processor 2001_S1 may transfer the electronic data received from the second server device 2200 to the first terminal device 1100 via the internal network.

[0119] In step S300, the processor 1001_T1 displays the contents of the electronic data provided in step S290 as the display unit 1190. A staff member of the local government can check the contents of the electronic data to be distributed, for example, by using the function of a browser in this manner.

[0120] In the above description, the process of steps S280 to S300 is executed after the electronic data is downloaded by the second terminal device 1200, but the present invention is not limited to this. The process of steps S280 to S300 may be executed at any timing after the electronic data is stored in step S190.

[0121] In the above description, a case where there is no restriction on checking the distribution contents is shown as an example, but the present invention is not limited to this. It is also possible to give authority only to the person in charge of electronic notification (for example, the person in charge of creating electronic data, the person in charge of attaching an electronic seal, and the person in charge of uploading electronic data, etc.) and to set a restriction so that no one other than the person in charge can check the distribution contents. In this case, the request in step S280 may be rejected depending on the account at the time of logging in to the first terminal device 1100.

[0122] 10 is a diagram showing an example of the flow of notification processing in the notification system 10 according to the present embodiment. The flow of FIG. 10 may be executed as processing subsequent to the flow of FIG.

[0123] In step S310, the processor 1001_T2, as the request unit 1220, requests the server device 2000 to submit electronic data to a third terminal device 1300 different from the first terminal device 1100 and the second terminal device 1200. More specifically, the processor 1001_T2 may transmit a message including a file name of the electronic data to be requested to be submitted and destination information (e.g., an email address) of the third terminal device 1300 to which the electronic data is to be submitted, to the third server device 2300 via an external network. Then, the processor 2001_S3 may transfer the message received from the second terminal device 1200 to the second server device 2200.

[0124] In step S320, the processor 2001_S2, as the submission unit 2270, submits the electronic data to a third terminal device 1300 different from the first terminal device 1100 and the second terminal device 1200. More specifically, the processor 2001_S2 may search a database using the file name included in the message received in step S310 as a key. Then, the processor 2001_S2 may transmit the searched electronic data to the third server device 2300, with the email address of the third terminal device 1300 as the destination. In response to this, the processor 2001_S3 may transfer the electronic data received from the second server device 2200 to the third terminal device 1300 via an external network.

[0125] In step S330, the processor 1001_T3, functioning as the electronic data receiving unit 1310, receives electronic data from the server device 2000. More specifically, the processor 1001_T3 receives electronic data to which a digital signature has been added from the third server device 2300 via an external network.

[0126] In step S340, the processor 1001_T3, as the verification unit 1320, verifies the electronic data received in step S330. More specifically, the processor 1001_T3 may compress the electronic data using a predetermined hash function to calculate a hash value. The processor 1001_T3 may also decrypt an electronic signature added to the electronic data with a public key to generate a hash value. The processor 1001_T3 may then compare the hash value calculated using the hash function with the hash value generated using the public key. If the comparison shows that the two values ​​match, the processor 1001_T3 may determine that the electronic data has not been tampered with and is reliable. On the other hand, if the comparison shows that the two values ​​do not match, the processor 1001_T3 may determine that the electronic data is not reliable.

[0127] In this case, if the electronic data is submitted periodically (for example, once a year), the processor 1001_T3 may also use information embedded in the received electronic data to verify whether the electronic data is the latest notification, i.e., whether it is an old version of the notification.

[0128] In step S350, the processor 1001_T3 reports the result of verifying the electronic data to the server device 2000. More specifically, the processor 1001_T3 may transmit a message indicating the result of the verification in step S340 to the third server device 2300 via the external network. In response to this, the processor 2001_S3 may transfer the message received from the third terminal device 1300 to the second server device 2200.

[0129] In step S360, the processor 2001_S2, as the verification result notification unit 2280, notifies the second terminal device 1200 of the result of the verification of the electronic data by the third terminal device 1300. More specifically, the processor 2001_S2 may transmit the message received in step S350 to the third server device 2300. Then, the processor 2001_S3 may transfer the message received from the second server device 2200 to the second terminal device 1200 via the external network.

[0130] In step S370, the processor 1001_T2, as the verification result receiving unit 1230, receives the result of the verification of the electronic data by the third terminal device 1300 from the server device 2000. More specifically, the processor 1001_T2 may receive the verification result indicating whether or not the electronic data is determined to be reliable from the third server device 2300 via the external network.

[0131] In the above description, the case where electronic data is submitted to the third terminal device 1300 in response to a request from the second terminal device 1200 has been described as an example, but the present invention is not limited to this. For example, if the additional information of the application data includes destination information of the third terminal device 1300 to which the electronic data is to be submitted, the processor 2001_S2 can submit the electronic data to the third terminal device 1300 without relying on a request from the second terminal device 1200.

[0132] In this manner, in the notification system 10 according to the present embodiment, electronic data as a notification uploaded from the first terminal device 1100, which is a distributor, to the server device 2000 is provided from the server device 2000 to the first terminal device 1100. As a result, the notification system 10 according to the present embodiment allows the distributor to check the state of the electronic data actually distributed to the distribution destination. Therefore, the notification system 10 according to the present embodiment, for example, does not need to store electronic data at the distributor, and thus suppresses the strain on capacity at the distributor, and allows the distributor to check the distribution content at any time even in cases where a part of the content of the electronic data is dynamically replaced or when an inquiry regarding the content of the electronic data is received.

[0133] In particular, in the notification system 10 according to this embodiment, a series of processes up to the addition of a digital signature to electronic data is completed within the first terminal device 1100 connected to the internal network, without going through an external network. Therefore, according to the notification system 10 according to this embodiment, when electronic data is imported from the first server device 2100 or the second server device 2200 to the internal network, it is possible to eliminate the need for a sanitization process.

[0134] In general, when data is imported into an internal network with a high level of security, such as a network exclusively used for governmental purposes, programs such as macros and attached files contained in the data are sanitized to prevent damage caused by malware. In principle, electronic signatures and the like are also included in the targets of such sanitization. Therefore, when electronic data with an electronic signature is imported into an internal network, the data is sanitized. In that case, the state of the electronic data differs between the destination and the source. Therefore, the source cannot check the electronic data in exactly the same state as the destination, which may cause inconvenience. In contrast, according to the notification system 10 of this embodiment, electronic data that is completed within the internal network and has an electronic signature added without passing through an external network can be excluded from the targets of sanitization and can be imported into the internal network as is. This allows the source to check the electronic data in exactly the same state as the destination.

[0135] In this way, according to the notification system 10 of this embodiment, data obtained from an external network is subjected to a sanitization process, while electronic data uploaded from the first terminal device 1100 can be excluded from the sanitization process.

[0136] Furthermore, in the notification system 10 according to the present embodiment, if a series of processes up to the addition of a digital signature to electronic data is completed within the first terminal device 1100, a further synergistic effect will be achieved. Therefore, in the notification system 10 according to the present embodiment, it can be said that one of the important processes is to determine whether the addition of at least one of an electronic seal impression and a digital signature satisfies a predetermined standard before uploading electronic data.

[0137] The above-mentioned processing can also be realized by a dedicated hardware circuit. In this case, it may be executed by a single piece of hardware or by multiple pieces of hardware.

[0138] In each of the above embodiments, the term "processor" refers to a processor in a broad sense, including general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0139] In addition, the operations of the processor in each of the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. Furthermore, the order of the operations of the processor is not limited to the order described in each of the above embodiments, and may be changed as appropriate.

[0140] The program may be provided by a computer-readable non-transitory recording medium such as a Universal Serial Bus (USB) memory, a flexible disk, or a Compact Disc Read Only Memory (CD-ROM), or may be provided online via a network such as the Internet. In this case, the program recorded on the computer-readable non-transitory recording medium is usually transferred to and stored in a memory or storage. The program may be provided as a standalone application software, or may be incorporated into the software of each device as a function of the device.

[0141] The program of the present disclosure can be provided as a program product. The program product includes any type of product for providing the program. For example, the program product includes a program provided through a network such as the Internet, and a non-transitory computer-readable recording medium such as a CD-ROM or DVD on which the program is stored.

[0142] The present disclosure is not limited to the above, and it goes without saying that various modifications can be made without departing from the spirit and scope of the present disclosure. [Explanation of symbols]

[0143] 10. Notification System 1000 Terminal Equipment 1001, 2001 processors 1002, 2002 ROM 1003, 2003 RAM 1004, 2004 Storage 1005, 2005 Communication Interface 1006 User Interface 1100 First terminal device 1110 Application Data Acquisition Department 1120 Notification Information Acquisition Department 1130 Electronic Data Creation Department 1140 Sorting Department 1150 Butt joint 1160 Electronic Seal Impression Department 1170 Electronic signature adding section 1180 Upload Section 1190 Display section 1200 Second terminal device 1210 Download section 1220 Request Department 1230 Verification Result Receipt Department 1300 Third Terminal Device 1310 Electronic Data Receiving Department 1320 Verification Department 1330 Verification Results Report Department 2000 Server Device 2100 First server device 2200 Second Server Device 2210 Storage Unit 2220 Notification Department 2230 Distribution Department 2240 Collaboration Department 2250 Opening Status Information Department 2260 Electronic Data Provision Department 2270 Submission Department 2280 Verification Results Contact Department 2300 Third Server Device

Claims

1. A notification system having a first terminal device connected to an internal network separated from an external network, a second terminal device connected to the external network, and a server device connected to the internal network and the external network, The processor of the first terminal device Obtain notification information indicating information on the target notification, uploading electronic data created based on the notification information to the server device; Prior to the upload, a digital signature is generated without going through the external network, and the digital signature is attached to the digital data; The processor of the second terminal device is downloading the electronic data from the server device; The processor of the server device includes: providing the electronic data uploaded from the first terminal device to the first terminal device; Notification system.

2. a processor included in the server device provides the electronic data to which the electronic signature has been added to the first terminal device without sanitizing the electronic data; The notification system of claim 1 .

3. a processor included in the first terminal device attaches an electronic seal to the electronic data prior to attaching the electronic signature; The notification system of claim 1 .

4. a processor included in the first terminal device applies the electronic seal so that the electronic seal at least partially overlaps a text describing the contents of the notification; The notification system of claim 3.

5. a processor included in the first terminal device permits uploading of only the electronic data in which at least one of the electronic seal and the electronic signature satisfies a predetermined standard; The notification system of claim 4.

6. The internal network is a network exclusively for administration; The external network is the Internet. A notification system according to any one of claims 1 to 5.

7. The processor of the first terminal device Acquire from the application system the application data entered by the applicant when applying for the notification; The notification information is obtained from a resident database that stores information about residents; checking the electronic data created based on the notification information against the application data; The notification system of claim 6.

8. a processor included in the first terminal device combines the electronic data with delivery destination information included in the application data according to a result of the checking; The notification system of claim 7.

9. a processor included in the server device, when the electronic data is downloaded by the second terminal device, communicating with the application system to the effect that the electronic data has been opened; The notification system of claim 7.

10. The processor of the server device includes: storing the electronic data uploaded from the first terminal device; when the electronic data becomes available for distribution, notifying the second terminal device that the electronic data is available for download; A notification system according to any one of claims 1 to 5.

11. The processor of the server device includes: submitting the electronic data to a third terminal device different from the first terminal device and the second terminal device; A notification system according to any one of claims 1 to 5.

12. A notification system having a first terminal device connected to an internal network separated from an external network, a second terminal device connected to the external network, and a server device connected to the internal network and the external network, The first terminal device, Obtaining notification information indicating information of a target notification; uploading electronic data created based on the notification information to the server device; generating a digital signature without going through the external network prior to the upload and attaching the digital signature to the digital data; The second terminal device, downloading the electronic data from the server device; The server device, providing the electronic data uploaded from the first terminal device to the first terminal device; Notification method.

13. A notification system having a first terminal device connected to an internal network separated from an external network, a second terminal device connected to the external network, and a server device connected to the internal network and the external network, The first terminal device, A process of acquiring notification information indicating information of a target notification; A process of uploading electronic data created based on the notification information to the server device; a process of generating an electronic signature without going through the external network and attaching the electronic signature to the electronic data prior to the upload; The second terminal device, execute a process of downloading the electronic data from the server device; The server device, executing a process of providing the electronic data uploaded from the first terminal device to the first terminal device; Notification program.

Images