Purchasing fraud detection business support device, purchasing fraud detection business support method, and purchasing fraud detection business support program

Abstract

To provide a purchase fraud detection work support device capable of supporting purchase fraud detection work by automatically calculating difference between a purchase amount in a check target period and the purchase amount in a comparison target period and detecting an abnormally large numerical value among the calculated difference.SOLUTION: In the present embodiment, (1) by referring to purchase accounting data including a purchase date, a payee, and a purchase amount and subtracting, from an amount obtained by aggregating for each payee the purchase amount corresponding to the purchase date belonging to a certain fiscal year, an amount obtained by aggregating for each payee the purchase amount corresponding to the purchase date belonging to the same month in the previous year of the certain fiscal year, a purchase difference amount for each combination of the fiscal year and the payee is calculated. (2) A purchase difference amount exceeding an upper limit value among the calculated purchase difference amount is detected as an abnormal value according to a predetermined statistical method. (3) The purchase difference amount detected as the abnormal value, and the fiscal year and the payee corresponding to the detected purchase difference amount are displayed.SELECTED DRAWING: Figure 16

Description

[Technical field]

[0001] The present invention relates to a purchasing fraud detection business support device, a purchasing fraud detection business support method, and a purchasing fraud detection business support program. [Background technology]

[0002] Paragraph 0025 of Patent Document 1 discloses that "The abolition of paper invoices makes it unclear who is responsible, and conventional processing methods are extremely vulnerable to fraud committed by collusion between the supplier and the ordering company's personnel. The sales audit model of this invention replaces invoices with electromagnetic media, so in the event of fraud, not only does it subject the supplier to civil liability, such as the return of ill-gotten gains, but it also makes it easier to pursue criminal liability for embezzlement, fraud, etc., and is an extremely powerful deterrent against fraud." [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2006-164255 A Summary of the Invention [Problem to be solved by the invention]

[0004] As described in the above-mentioned Patent Document 1, it is important for a company to discover fraudulent acts (purchase fraud) regarding purchase records that are committed through collusion between the company's own personnel and those of its business partners.

[0005] One form of purchasing fraud involves a company's own staff conspiring with a client's staff to record fictitious purchases, pay the amount to the client, and then later receiving a kickback from the client's staff for the amount paid for the fictitious purchases.

[0006] This method has the characteristic that the purchase amount for the month in which fictitious purchases were made increases sharply compared to the purchase amount for the same month of the previous year, for example. Therefore, in order to discover fictitious purchases, it is sufficient to compare the purchase amount for the month being confirmed with the purchase amount for the comparison month corresponding to the same month of the previous year.

[0007] However, in the past, the task of tallying up monthly purchase amounts and comparing them with the purchase amounts for the same month of the previous year was done manually by personnel, which resulted in the problem that the task of discovering purchasing fraud took a great deal of time and effort.

[0008] The present invention has been made in consideration of the above problems, and has an object to provide a purchasing fraud detection work support device, a purchasing fraud detection work support method, and a purchasing fraud detection work support program that can support the work of detecting purchasing fraud by automatically calculating the difference between the purchase amount during a period to be confirmed and the purchase amount during a period to be compared, and detecting any calculated differences that are abnormally large. [Means for solving the problem]

[0009] In order to solve the above-mentioned problems and achieve the object, a purchasing fraud detection business support device according to the present invention is capable of supporting a business of detecting fraud relating to purchasing performance by calculating a purchasing difference amount, which is the difference between the purchasing amount during a period to be confirmed and the purchasing amount during a period to be compared, and the purchasing fraud detection business support device includes a control unit and a storage unit, the storage unit stores purchasing accounting data including a purchasing date, supplier identification data, and a purchasing amount, and the control unit calculates a purchasing amount corresponding to the purchasing date belonging to the period to be confirmed for each supplier identification data, and calculates a purchasing amount corresponding to the purchasing date belonging to the period to be confirmed for each supplier identification data, the purchasing amount corresponding to the purchasing date belonging to the period to be compared, the purchasing amount corresponding to ... the purchase difference amount for each combination of the confirmation period and the trading partner identification data by subtracting the purchase amount corresponding to the purchase date belonging to the period by an amount calculated for each trading partner identification data; an abnormal value detection means for detecting, in accordance with a predetermined statistical method, an abnormal value among the purchase difference amounts calculated by the purchase difference amount calculation means that exceeds an upper limit; and an abnormality display means for displaying the purchase difference amount detected as an abnormal value by the abnormal value detection means and the combination of the confirmation period and the trading partner identification data corresponding to the detected purchase difference amount.

[0010] In the purchasing fraud detection business support device according to the present invention, the abnormality display means also displays the predetermined statistical method and the upper limit value.

[0011] Furthermore, in the purchasing fraud detection business support device of the present invention, the predetermined statistical method is a method using the interquartile range, and the upper limit value is a value calculated by adding a value obtained by multiplying the interquartile range by 1.5 to the third quartile.

[0012] In addition, in the purchasing fraud detection business support device of the present invention, the memory unit further stores purchase difference amount calculation result data including an amount obtained by aggregating the purchase amount in the purchase accounting data for each period and the customer identification data, and the period and the customer identification data, and the control unit further includes a customer-specific graph display means for generating and displaying a line graph showing the progress of the aggregated amount for each period based on the purchase difference amount calculation result data, the number of which is the number of customer identification data, and the line graph has the aggregated amount in the purchase difference amount calculation result data as the vertical axis and the period in the purchase difference amount calculation result data as the horizontal axis.

[0013] In addition, in the purchasing fraud detection business support device according to the present invention, the storage unit further stores purchase difference amount calculation result data including an amount obtained by aggregating the purchase amount in the purchase apportionment data for each period and the customer identification data, the period, and the customer identification data, and the control unit further stores a line graph showing a trend of the aggregated amount for each period in a confirmation target year for the customer identification data corresponding to the purchase difference amount detected by the abnormal value detection means, and The system further includes a graph display means for comparing two years, which generates and displays a line graph showing the trend of the aggregated amount for each period in the comparison year for the supplier identification data corresponding to the purchase difference amount, wherein the year to be confirmed is the year to which the period to be confirmed belongs which corresponds to the purchase difference amount detected as an abnormal value by the abnormal value detection means, and the comparison year is the year immediately preceding the year to be confirmed, and the line graph has the aggregated amount in the purchase difference amount calculation result data on the vertical axis and the month without a year displayed on the horizontal axis.

[0014] In addition, in the purchasing fraud detection business support device of the present invention, the purchase accounting data further includes at least one aggregation unit among business establishment identification data, department identification data, and person in charge identification data, the memory unit further stores purchase amount aggregation data including an amount obtained by aggregating the purchase amounts in the purchase accounting data for each combination of a period, the business partner identification data, and the aggregation unit, the period, the business partner identification data, and the aggregation unit, and the control unit further includes a graph display means for displaying a line graph by aggregation unit based on the purchase amount aggregation data, the line graph showing the progress of the aggregated amount for each period for the business partner identification data corresponding to the purchase difference amount detected by the abnormal value detection means, the line graph having the aggregated amount in the purchase amount aggregation data as the vertical axis and the period in the purchase amount aggregation data as the horizontal axis.

[0015] In addition, in the purchasing fraud detection business support device according to the present invention, the purchase accounting data further includes at least one of aggregating units of business establishment identification data, department identification data, and person in charge identification data, and, for purchases made via an order by registering order accounting data, an order number, and the memory unit stores the purchase amounts in the purchase accounting data, aggregated for each combination of a period, the customer identification data, the aggregation unit, and the presence or absence of the order number, the period, the customer identification data, the aggregation unit, an immediate purchase classification which is a classification when the purchase amounts without the order number are aggregated, and an immediate purchase classification which is a classification when the purchase amounts with the order number are aggregated. The control unit further stores therein aggregated data by purchase method including an order via category which is a category when the difference in purchase amount is calculated based on the aggregated data by purchase method, and the control unit further includes a purchase accounting method-specific graph display means for generating and displaying bar graphs showing the aggregated amounts for the period corresponding to the purchase difference amount detected by the abnormal value detection means and for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means, the number of bar graphs being the number of aggregation units, and in the bar graphs, the aggregated amounts corresponding to the immediate purchase category and the aggregated amounts corresponding to the order via category are distinguishable.

[0016] In the purchasing fraud detection business support device according to the present invention, the storage unit further includes sales recording data including a sales date and a sales amount, a purchase summary record including an amount obtained by summarizing the purchase amount in the purchase recording data for each combination of a period and the customer identification data, the period in the purchase recording data, and the customer identification data in the purchase recording data, and sales and purchase summary data including a sales summary record including an amount obtained by summarizing the sales amount in the sales recording data for each period and the period in the sales recording data. the control unit generates a line graph showing the trend of the aggregated amount for each period for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase aggregation record, generates a line graph showing the aggregated amount for each period based on the sales aggregation record, and further comprises a sales / purchase comparison graph display means for displaying both graphs together, and the line graph has the aggregated amount in the record as the vertical axis and the period in the record as the horizontal axis.

[0017] In the purchasing fraud detection business support device according to the present invention, the storage unit further includes order / purchase-specific summary data including order posting data including an order date and an order amount, a purchase summary record including an amount obtained by summarizing the purchase amount in the purchase posting data for each combination of a period and the customer identification data, the period in the purchase posting data, and the customer identification data in the purchase posting data, and an order / purchase summary record including an amount obtained by summarizing the order amount in the order posting data for each period, and the period in the order posting data. the control unit generates a line graph showing the trend of the aggregated amount for each period for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase aggregation record, generates a line graph showing the aggregated amount for each period based on the order aggregation record, and further comprises an order / purchase comparison graph display means for displaying both graphs together, and the line graph has the aggregated amount in the record as the vertical axis and the period in the record as the horizontal axis.

[0018] In addition, in the purchasing fraud detection business support device according to the present invention, the confirmation period is a certain month of a certain year, and the comparison period is the certain month of the year prior to the certain year.

[0019] In addition, in the purchasing fraud detection business support method according to the present invention, a purchasing difference amount, which is the difference between the purchasing amount during a period to be confirmed and the purchasing amount during a period to be compared, is calculated, and the purchasing fraud detection business support method is executed by an information processing device having a control unit and a storage unit, and can support a business to detect fraud regarding purchasing records. The storage unit stores purchasing accounting data including a purchasing date, customer identification data, and a purchasing amount, and the control unit calculates the purchasing amount corresponding to the purchasing date belonging to the confirmation period from the amount obtained by aggregating the purchasing amount for each customer identification data. The method includes a purchase difference amount calculation step for calculating the purchase difference amount for each combination of the confirmation period and the trading partner identification data by subtracting the purchase amount corresponding to the purchase date by an amount calculated for each trading partner identification data; an abnormal value detection step for detecting, according to a predetermined statistical method, an abnormal value that exceeds an upper limit among the purchase difference amounts calculated in the purchase difference amount calculation step; and an abnormality display step for displaying the purchase difference amount detected as an abnormal value in the abnormal value detection step and the combination of the confirmation period and the trading partner identification data corresponding to the detected purchase difference amount.

[0020] In addition, the purchasing fraud detection business support program according to the present invention is a purchasing fraud detection business support program executed by an information processing device having a control unit and a storage unit, which can support a business of detecting fraud relating to purchasing records by calculating a purchasing difference amount, which is the difference between the purchasing amount during a period to be confirmed and the purchasing amount during a period to be compared, and the storage unit stores purchasing accounting data including a purchasing date, supplier identification data, and a purchasing amount, and the control unit executes a purchasing fraud detection business support program by calculating a purchasing difference amount, which is the difference between the purchasing amount during a period to be confirmed and the purchasing amount during a period to be compared, from an amount obtained by aggregating the purchasing amount corresponding to the purchasing date belonging to the period to be confirmed for each supplier identification data, the purchase difference amount for each combination of the confirmation period and the supplier identification data by subtracting the purchase amount corresponding to the purchase date from the amount calculated for the purchase date set forth in claim 1 by an amount calculated for each of the supplier identification data; an abnormal value detection step for detecting, according to a predetermined statistical method, an abnormal value that exceeds an upper limit among the purchase difference amounts calculated in the purchase difference amount calculation step; and an abnormality display step for displaying the purchase difference amount detected as an abnormal value in the abnormal value detection step and the combination of the confirmation period and the supplier identification data corresponding to the detected purchase difference amount. Effect of the Invention

[0021] According to the present invention, the difference between the purchase amount during the period to be confirmed and the purchase amount during the period to be compared is automatically calculated, and any calculated difference amounts that are abnormally large are automatically detected, thereby providing the effect of assisting in the detection of purchase fraud. [Brief description of the drawings]

[0022] [Figure 1] FIG. 1 is a block diagram showing an example of the configuration of a purchasing fraud detection operation support device. [Diagram 2] FIG. 2 is a diagram showing an example of fraud (fictitious purchases) regarding purchase records. [Diagram 3] FIG. 3 is a diagram showing an example of normal purchase records and abnormal purchase records. [Figure 4] FIG. 4 is a diagram showing an example of the initial analysis screen. [Diagram 5] FIG. 5 is a diagram showing an example of the analysis screen. [Figure 6] FIG. 6 is a diagram showing an example of a purchase data registration screen and purchase accounting data in the case of immediate purchase. [Figure 7] FIG. 7 is a diagram showing an example of an order data registration screen and order accounting data when purchasing via an order, and a purchase data registration screen and purchase accounting data when purchasing via an order. [Figure 8] FIG. 8 is a diagram showing an example of acquisition range condition data for automatic detection execution schedule data and purchase accounting data. [Figure 9] FIG. 9 is a diagram showing an example of automatic detection execution schedule data and parameters used for acquiring the data. [Figure 10] FIG. 10 is a diagram showing an example of acquisition range condition data for purchase appropriation data and parameters used for the acquisition. [Figure 11] FIG. 11 is a diagram showing an example of parameters used for acquiring data from the purchase accounting data. [Figure 12] FIG. 12 is a diagram showing an example of the purchase appropriation data and the purchase difference amount calculation result data. [Figure 13] FIG. 13 is a diagram showing an example of abnormal value detection using the interquartile range. [Figure 14] FIG. 14 is a diagram showing an example of the abnormality determination result data, the abnormality determination result message data, and the abnormality determination result message detail data. [Figure 15] FIG. 15 is a diagram showing an example of parameters used to acquire the abnormality determination result message data. [Figure 16] FIG. 16 is a diagram showing an example of a summary message displayed on the initial analysis screen. [Figure 17] FIG. 17 is a diagram showing an example of a set of base dates on the initial analysis screen. [Figure 18]FIG. 18 is a diagram showing an example of a detailed message displayed on the analysis screen. [Figure 19] FIG. 19 is a diagram showing an example of the output area of ​​a graph. [Figure 20] FIG. 20 is a diagram showing an example of analysis data acquisition range conditions. [Figure 21] FIG. 21 is a diagram showing an example of extraction condition initial values. [Figure 22] FIG. 22 is a diagram showing an example of a set of extraction conditions on the analysis screen. [Figure 23] FIG. 23 is a diagram showing an example in which the aggregation unit "person in charge" and the aggregation target "sales" are specified as parameters used to acquire data that is the basis for generating graphs 1 and 2. [Figure 24] FIG. 24 is a diagram showing an example of the purchase appropriation data and the purchase difference amount calculation result data. [Diagram 25] FIG. 25 is a diagram showing an example in which the aggregation unit "person in charge" and the aggregation target "sales" are specified as parameters used to acquire data that is the basis for generating Graph 3. [Figure 26] FIG. 26 is a diagram showing an example of the purchase appropriation data and the purchase amount summary data. [Figure 27] FIG. 27 is a diagram showing an example in which the aggregation unit "person in charge" and the aggregation target "sales" are specified as parameters used to acquire data that is the basis for generating graph 4. [Figure 28] FIG. 28 is a diagram showing an example of the order recording data, the purchase recording data, and the tabulated data by purchase method. [Figure 29] FIG. 29 is a diagram showing an example in which the aggregation unit "person in charge" and the aggregation target "sales" are specified as parameters used to acquire data that is the basis for generating graph 5. [Diagram 30] FIG. 30 is a diagram showing an example of sales recorded data, purchase recorded data, and sales and purchase aggregated data. [Diagram 31] FIG. 31 is a diagram showing an example of graph 1 when the aggregation unit is "person in charge" and the aggregation target is "sales." [Diagram 32] FIG. 32 is a diagram showing an example of graph 2 when the aggregation unit is "person in charge" and the aggregation target is "sales." [Diagram 33] FIG. 33 is a diagram showing an example of graph 3 when the aggregation unit is "person in charge" and the aggregation target is "sales." [Diagram 34] FIG. 34 is a diagram showing an example of graph 4 when the aggregation unit is "person in charge" and the aggregation target is "sales." [Diagram 35] FIG. 35 is a diagram showing an example of graph 5 when the aggregation unit is "person in charge" and the aggregation target is "sales." [Diagram 36] FIG. 36 is a diagram showing an example of a list of graphs 1 to 5 when the aggregation unit is "person in charge" and the aggregation target is "sales." [Figure 37] FIG. 37 is a diagram showing an example of coloring parameters that need to be set when highlighting a graph by coloring. [Figure 38] FIG. 38 is a diagram showing an example in which the aggregation unit "department" and the aggregation target "sales" are specified as parameters used to acquire data that is the basis for generating graphs 1 and 2. [Figure 39] FIG. 39 is a diagram showing an example in which the aggregation unit "department" and the aggregation target "sales" are specified as parameters used to acquire data that is the basis for generating Graph 3. [Diagram 40] FIG. 40 is a diagram showing an example of the purchase appropriation data and the purchase amount summary data. [Diagram 41] FIG. 41 is a diagram showing an example in which the aggregation unit "department" and the aggregation target "sales" are specified as parameters used to acquire data that is the basis for generating graph 4. [Diagram 42] FIG. 42 is a diagram showing an example of order recording data, purchase recording data, and data tabulated by purchase method. [Diagram 43] FIG. 43 is a diagram showing an example of graph 3 when the aggregation unit is "department" and the aggregation target is "sales." [Diagram 44]FIG. 44 is a diagram showing an example of graph 4 when the aggregation unit is "department" and the aggregation target is "sales." [Diagram 45] FIG. 45 is a diagram showing an example of a list of graphs 1 to 5 when the aggregation unit is "department" and the aggregation target is "sales." [Diagram 46] FIG. 46 is a diagram showing an example of coloring parameters that need to be set when highlighting a graph by coloring. [Figure 47] FIG. 47 is a diagram showing a comparison between an example of graph 3 when the counting unit is "person in charge" and an example of graph 3 when the counting unit is "department." [Figure 48] FIG. 48 is a diagram showing, in comparison, an example of graph 4 when the counting unit is "person in charge" and an example of graph 4 when the counting unit is "department." [Figure 49] FIG. 49 is a diagram showing an example in which the aggregation unit "department" and the aggregation target "order" are specified as parameters used to acquire data that is the basis for generating graphs 1 and 2. [Figure 50] FIG. 50 is a diagram showing an example in which the aggregation unit "department" and the aggregation target "order" are specified as parameters used to acquire data that is the basis for generating graph 5. [Figure 51] FIG. 51 is a diagram showing an example of the order entry data, the purchase entry data, and the order / purchase specific aggregate data. [Figure 52] FIG. 52 is a diagram showing an example of graph 5 in the case where the aggregation unit is "department" and the aggregation target is "orders." [Figure 53] FIG. 53 is a diagram showing an example of a list of graphs 1 to 5 when the aggregation unit is "department" and the aggregation target is "orders." [Figure 54] FIG. 54 is a diagram showing an example of graph 5 when the aggregation target is "sales." [Figure 55] FIG. 55 is a diagram showing an example of graph 5 when the aggregation target is "orders." DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0023] Hereinafter, embodiments of a purchasing fraud detection business support device, a purchasing fraud detection business support method, and a purchasing fraud detection business support program according to the present invention will be described in detail with reference to the drawings. Note that the present invention is not limited to the embodiments.

[0024] [1. Overview] In this section, the background, problems, overview and effects of the present invention will be explained in order.

[0025] [1-1. Background] In recent years, corporate fraud and scandals such as embezzlement by employees and executives (hereinafter collectively referred to as "fraud") have been on the rise. In addition, due to the impact of COVID-19, such fraud is on the rise. For this reason, fraud is exceeding the range of what can be detected by humans, and there is a demand for a system that can detect and deal with it early using non-human means.

[0026] There are various types of fraud. The first type is fraud related to sales records. This type of fraud inflates records by falsifying sales figures. The second type is fraud related to purchasing records. This type of fraud involves collusion with business partners through fictitious payments. The third type is fraud related to inventory. This type of fraud involves profit manipulation, such as by inflating end-of-period inventory values. This embodiment deals with the second type of fraud, fraud related to purchasing records (hereinafter referred to as "purchasing fraud").

[0027] As shown in Figure 2, purchasing fraud is often committed by conspiring with a person in charge at a business partner to make fictitious purchases. The specific flow is as follows: first, as shown in Figure 2 (1), a fictitious transaction is created between one's own company's person and a person in charge at the business partner to align their understanding. Next, as shown in Figure 2 (2), one's own company's person records fictitious purchasing data, and as shown in Figure 2 (3), one's own company processes payment to the business partner. Then, after payment, as shown in Figure 2 (4), the person in charge at the business partner gives a kickback to one's own company's person for the amount paid for the fictitious transaction.

[0028] Purchasing fraud may have the following characteristics, for example: 1. Purchase amounts are concentrated among certain business partners. 2. For business partners who have engaged in fraudulent transactions, show an increase in purchase amounts that are clearly unnatural compared to past transactions. 3. There is a combination of business partners and personnel that results in biased purchasing records.

[0029] Here, in most cases, purchasing transactions are basically constant. For this reason, the reasons for an increase in purchasing transactions can be narrowed down to the following, for example. First, an increase in purchasing due to strong sales and increased demand. In this case, the timing of the increase in purchasing is at the beginning and end of the term. Second, an increase in purchasing due to the need to secure inventory with the addition of new transactions. In this case, the timing of the increase in purchasing is at the beginning and end of the term. Third, an increase in purchasing due to the need to secure inventory with the arrival of a selling season. In this case, the timing of the increase in purchasing is at the end of each quarter during the term. The increase in purchasing explained in this paragraph is, so to speak, a normal increase in purchasing that is not due to fraud.

[0030] In contrast, in the case of an increase in purchases due to fraud, as shown in Figure 3, the purchase amount often increases sharply compared to the same month of the previous year. Specifically, in the example of business partner A in Figure 3, since no purchase fraud was committed, there is no significant difference in the purchase amount when comparing the same month of the current year and last year (the difference is at most 1,000 yen). In contrast, in the example of business partner B in Figure 3, there is a difference of 19,500 yen in the purchase amount between August 2021 (purchase amount: 30,000 yen) of the current year when the purchase fraud occurred and August 2020 (purchase amount: 10,500 yen) of the previous year. From this, it can be inferred that there is a high possibility that purchase fraud occurred in August 2021.

[0031] [1-2. Issues] However, there were problems with the detection of purchasing fraud by humans, as outlined below in (1) and (2).

[0032] (1) First, there was a problem with the tabulation work using multiple combinations. That is, in order to discover purchasing fraud, it is first necessary to tabulate the monthly purchase amounts for each tabulation unit for all business partners. However, since there are various possible tabulation units as explained below, the tabulation takes time and is prone to errors. Examples of the tabulation units include "business partner unit," which is used when simply checking the month in which the purchase amount increased abnormally, "(business partner x person in charge) unit," which is used when checking whether there is a concentration of transactions between business partners and a specific person in charge, and "(business partner x organization) unit," which is used when checking whether there is a concentration of transactions between business partners and a specific organization.

[0033] (2) There was also a problem with the comparison work carried out after the tabulation work. That is, if the purchase amounts for a certain month of the current year and the corresponding month of the previous year were compared visually, it took time to check and there was a problem that it was easy to miss some items.

[0034] [1-3. Overview and Effects] In this embodiment, in order to solve the above problems (1) and (2), for example, the following function (1) is implemented. In addition, the following functions (2) to (5) are implemented as secondary functions.

[0035] (1)First, we have made it possible to automatically detect suppliers whose purchase amounts, calculated for each month, have increased dramatically compared to the same month of the previous year. This has made it possible to perform the calculation and comparison tasks easily, accurately, and quickly.

[0036] (2) In addition, the monthly purchase amounts for the fiscal year including the month in which an anomaly was detected and the monthly purchase amounts for the fiscal year immediately prior to that year can be visualized as a graph (Graph 2, described below). This makes it possible to analyze whether the purchase results for the month in which an anomaly was detected show an unnatural increase compared to the purchase results for the same month in the previous fiscal year, and whether the purchase results for the month in which an anomaly was detected are based on abnormal transactions that have never been recorded in the past, etc.

[0037] (3) For business partners for which anomalies have been detected, the actual purchase amounts can be visualized as a graph (Graph 3 described below) by the business establishment, department, or person who recorded the purchases. This makes it possible to determine, for example, whether the purchase fraud occurred at the organizational level, or at the individual level of a person in charge. In the case of purchase fraud at the organizational level, it is further possible to determine whether the purchase fraud occurred at the business establishment level, or at the department level. It is also possible to determine which business establishment, department, or person in charge committed the purchase fraud.

[0038] (4) Furthermore, the purchase amount can be visualized as a graph (Graph 4 described below) by dividing it into two types, "immediate purchase" and "purchase via order," for each business establishment, department, or person in charge who recorded the purchase. This makes it possible to check whether the recording of purchase amounts using "immediate purchase," which is difficult to check, is concentrated.

[0039] Here, we will explain purchasing via order and immediate purchasing. Purchasing via order is used when all steps of ordering, receiving and purchasing are registered in the data. Generally, more companies use purchasing via order. With purchasing via order, the transaction details are checked before purchasing, such as checking the purchase order when ordering and the receipt confirmation when receiving, so it is difficult to commit purchasing fraud. In contrast, immediate purchasing is used when ordering, receiving and purchasing are already completed, and only the purchasing results are registered in the data. Immediate purchasing is often used by companies that purchase mechanically based on certain transactions. With immediate purchasing, the transaction details are not checked, so it is easy to commit purchasing fraud.

[0040] (5) Furthermore, the monthly occurrence status of sales records or order records and purchase records can be visualized as a graph (Graph 5 described later). Here, in the case of the three normal patterns in which purchase transactions increase as explained in [1-1. Background], the purchase records also increase as the sales records or order records increase, but if purchase fraud occurs, the purchase records increase even though the sales records or order records do not increase. According to the graph explained in this paragraph (Graph 5 described later), it is possible to check whether such an unnatural increase in purchase records has occurred. The specific configuration and operation are explained below.

[0041] [2. Configuration] An example of the configuration of the purchasing fraud detection work support device 100 according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a block diagram showing an example of the configuration of the purchasing fraud detection work support device 100.

[0042] The purchasing fraud detection business support device 100 is a commercially available desktop personal computer. The purchasing fraud detection business support device 100 is not limited to a stationary information processing device such as a desktop personal computer, but may be a portable information processing device such as a commercially available notebook personal computer, a PDA (Personal Digital Assistant), a smartphone, or a tablet personal computer.

[0043] The purchasing fraud detection business support device 100 includes a control unit 102, a communication interface unit 104, a storage unit 106, and an input / output interface unit 108. Each unit included in the purchasing fraud detection business support device 100 is connected to each other so as to be able to communicate with each other via any communication path.

[0044] The communication interface unit 104 communicatively connects the purchasing fraud detection work support device 100 to the network 300 via a communication device such as a router and a wired or wireless communication line such as a dedicated line. The communication interface unit 104 has a function of communicating data with other devices via the communication line. Here, the network 300 has a function of connecting the purchasing fraud detection work support device 100 and the server 200 so that they can communicate with each other, and is, for example, the Internet or a LAN (Local Area Network). Note that data such as various masters described below may be stored in the server 200, for example.

[0045] An input device 112 and an output device 114 are connected to the input / output interface unit 108. The output device 114 may be a monitor (including a home television), a speaker, or a printer. The input device 112 may be a keyboard, a mouse, a microphone, or a monitor that cooperates with a mouse to realize a pointing device function. In the following, the output device 114 may be referred to as the monitor 114, and the input device 112 may be referred to as the keyboard 112 or the mouse 112.

[0046] Various databases, tables, files, etc. are stored in the storage unit 106. Computer programs for cooperating with an OS (Operating System) to give instructions to a CPU (Central Processing Unit) to perform various processes are recorded in the storage unit 106. For example, memory devices such as RAM (Random Access Memory) and ROM (Read Only Memory), fixed disk devices such as hard disks, flexible disks, and optical disks can be used as the storage unit 106.

[0047] The memory unit 106 includes, for example, automatic detection execution schedule data 106a, acquisition range condition data 106b, purchase accounting data 106c, order accounting data 106d, sales accounting data 106e, order accounting data 106f, purchase difference amount calculation result data 106g, purchase amount summary data 106h, summary data by purchase method 106i, summary data by sales and purchase 106j, summary data by order and purchase 106k, abnormality determination result data 106m, abnormality determination result message data 106n, and abnormality determination result message detail data 106p.

[0048] Here, definitions of terms used in this embodiment and an overview of each piece of data contained in the storage unit 106 will be described.

[0049] In this embodiment, the purchase difference amount is the difference between the purchase amount during the confirmation period and the purchase amount during the comparison period. The confirmation period is, for example, a certain month in a certain year, and the comparison period is, for example, the certain month in the year prior to the certain year (i.e., the same month of the previous year).

[0050] In this embodiment, it is assumed that the business partner and the payee are the same. Therefore, in the following description, the "business partner" may be expressed as the "payee."

[0051] The automatic detection execution schedule data 106a and the acquisition range condition data 106b belong to the "data for executing anomaly detection" and are preset data for performing anomaly detection.

[0052] The purchase entry data 106c, the order entry data 106d, the sales entry data 106e, and the order entry data 106f belong to the "business data" and are assumed data accumulated in the course of business.

[0053] The abnormality determination result data 106m, the abnormality determination result message data 106n, and the abnormality determination result message detail data 106p belong to the "abnormality determination result data" and are data that store the determination results of the abnormality detection execution.

[0054] The contents of each data item contained in storage unit 106 will be described in detail below.

[0055] As shown in FIG. 8, the automatic detection execution schedule data 106a includes, for example, a detection ID, a schedule ID, an execution condition, an execution time, and the like.

[0056] The acquisition range condition data 106b is, for example, data for setting a range when acquiring data from the purchase accounting data 106c. The acquisition range condition data 106b includes, for example, the detection ID, the schedule ID, a target column, a FROM condition, a TO condition, and the like, as shown in FIG.

[0057] The purchase accounting data 106c is data that accumulates daily purchase accounting. As shown in Fig. 24, the purchase accounting data 106c includes, for example, a purchase number, a purchase date, an order number, business establishment identification data (business establishment), department identification data (department), person in charge identification data (person in charge), business partner identification data (payee), and a purchase amount. The business establishment identification data (business establishment), department identification data (department), and person in charge identification data (person in charge) are the units of calculation when the purchase amount is calculated.

[0058] Here, the method of registering the purchase accounting data 106c will be explained separately for immediate purchase and purchase via order. The definitions of immediate purchase and purchase via order are as explained in (4) of [1. Overview], [1-3. Overview and Effects].

[0059] In the case of immediate purchase, purchase accounting data 106c is registered without inputting an order number on the purchase data registration screen as shown in Fig. 6. Therefore, the generated purchase accounting data 106c corresponding to immediate purchase does not hold an order number as shown in Fig. 6.

[0060] In the case of purchase via order, first, order accounting data 106d is registered from the order data registration screen as shown in Fig. 7. Then, when the ordered goods arrive and the arrival confirmation is completed, purchase accounting data 106c is registered with the order number (H001) entered from the purchase data registration screen as shown in Fig. 7. Therefore, the generated purchase accounting data 106c corresponding to purchase via order holds the order number (H001) as shown in Fig. 7.

[0061] In this way, if a record in purchase accounting data 106c does not hold an order number, the purchase identified by that record is an immediate purchase. On the other hand, if a record in purchase accounting data 106c holds an order number, the purchase identified by that record is a purchase via an order. In other words, it is possible to distinguish between immediate purchases and purchases via an order depending on whether or not an order number is present in a record in purchase accounting data 106c. Information on whether a purchase is immediate or via an order is related to the generation of graph 4, which will be described later.

[0062] Returning to the explanation of the data included in the storage unit 106, the order accounting data 106d is data obtained by accumulating daily order accounting. As shown in Fig. 28, the order accounting data 106d includes, for example, the order number, the order date, the business establishment identification data (business establishment), the department identification data (department), the person in charge identification data (person in charge), the customer identification data (payee), the order amount, and the like.

[0063] The sales entry data 106e is data that accumulates daily sales entries. As shown in FIG. 30, the sales entry data 106e includes, for example, a sales number, a sales date, the business establishment identification data (business establishment), the department identification data (department), the person in charge identification data (person in charge), and a sales amount.

[0064] The order entry data 106f is data that accumulates daily order entries. As shown in FIG. 51, the order entry data 106f includes, for example, an order number, an order date, the business establishment identification data (business establishment), the department identification data (department), the person in charge identification data (person in charge), and an order amount.

[0065] The purchase difference amount calculation result data 106g is data including the result of calculating the purchase difference amount by referring to the purchase appropriation data 106c. As shown in Fig. 24, the purchase difference amount calculation result data 106g includes, for example, a period (fiscal year and month), the business partner identification data (payee), the purchase amount in the purchase appropriation data 106c totaled for each period (fiscal year and month) and business partner identification data (payee) (monthly purchase amount total and monthly purchase amount total for the same month of the previous year), and the purchase difference amount (monthly purchase difference amount total).

[0066] The purchase amount summary data 106h includes the result of summarizing the purchase amount according to the summarizing unit with reference to the purchase appropriation data 106c. As shown in Fig. 26 and Fig. 40, the purchase amount summary data 106h includes, for example, the period (fiscal year and month), the customer identification data (payee), the summarizing unit ("person in charge" in Fig. 26, and "department" in Fig. 40), and the amount (purchase amount) obtained by summarizing the purchase amount in the purchase appropriation data 106c for each combination of the period (fiscal year and month), the customer identification data (payee), and the summarizing unit.

[0067] The purchase method-specific aggregation data 106i includes the result of aggregating the purchase amount according to the purchase accounting method with reference to the purchase accounting data 106c. As shown in Figs. 28 and 42, the purchase method-specific aggregation data 106i includes, for example, the purchase accounting method (purchase method), the period (accounting year and month), the customer identification data (payee), the aggregation unit ("person in charge" in Fig. 28, and "department" in Fig. 42), and the amount (purchase amount) obtained by aggregating the purchase amount in the purchase accounting data 106c for each combination of the period (accounting year and month), the customer identification data (payee), the aggregation unit, and the presence or absence of the purchase order number. The purchase accounting method (purchase method) includes two types: an immediate purchase category (immediate purchase), which is a category when the purchase amount without the purchase order number is aggregated, and an order via category (purchase via order), which is a category when the purchase amount with the purchase order number is aggregated.

[0068] The sales and purchase aggregated data 106j includes the results of aggregating the sales amount with reference to the sales recording data 106e and the results of aggregating the purchase amount with reference to the purchase recording data 106c. As shown in Fig. 30, the sales and purchase aggregated data 106j includes sales aggregate records that are records including the data classification "sales" indicating that the results are aggregated with reference to the sales recording data 106e, and purchase aggregate records that are records including the data classification "purchase" indicating that the results are aggregated with reference to the purchase recording data 106c.

[0069] The aggregated data by order / purchase 106k is data including the result of aggregating the order amount with reference to the order posting data 106f and the result of aggregating the purchase amount with reference to the purchase posting data 106c. As shown in Fig. 51, the aggregated data by order / purchase 106k is made up of order aggregation records which are records including the data classification "order" indicating that the result is aggregating with reference to the order posting data 106f, and purchase aggregation records which are records including the data classification "purchase" indicating that the result is aggregating with reference to the purchase posting data 106c.

[0070] The contents of the sales total record, the order total record and the purchase total record will be described below.

[0071] As shown in FIG. 30, the sales summary record includes, for example, the data classification "Sales," the period (fiscal year / month), and the sales amount in the sales recording data 106e summarized for each period (fiscal year / month).

[0072] As shown in FIG. 51, the order summary record includes, for example, the data classification "order," the period (fiscal year / month), and the order amount in the order posting data 106f summarized for each period (fiscal year / month).

[0073] As shown in Figures 30 and 51, the purchase summary record includes, for example, the data classification "Purchase," the period (fiscal year and month), the supplier identification data (payee), and the purchase amount in the purchase accounting data 106c summarized for each combination of the period (fiscal year and month) and the supplier identification data (payee).

[0074] Returning to the explanation of the data contained in the memory unit 106, the abnormality determination result data 106m, as shown in FIG. 14 etc., includes, for example, an abnormality detection ID (detection ID), which is the detection ID that detected an abnormality in the purchase difference amount (hereinafter referred to as "anomaly detection" in this paragraph), an abnormality detection JOBID (JOBID), which is an ID for identifying the JOB in which the abnormality was detected, a message ID, which is an ID for identifying the message to be output when an abnormality is detected, the period (fiscal year and month) in which the abnormality was detected, the business partner identification data (payee) for the business partner in which the abnormality was detected, the abnormal purchase difference amount detected, and an upper limit value calculated using a predetermined statistical method.

[0075] 14, the abnormality determination result message data 106n includes, for example, the abnormality detection ID (detection ID), the abnormality detection JOBID (JOBID), the message ID, a category (degree of abnormality) for identifying the presence or absence of an abnormality, a definition name specified by the abnormality detection JOBID, an overview, the detected contents (detection target), etc. The detected contents are the detected abnormal purchase difference amount and the combination of the corresponding period (fiscal year and month) and the customer identification data (payee).

[0076] As shown in FIG. 14, the abnormality determination result message detail data 106p includes, for example, the abnormality detection ID (detection ID), the abnormality detection JOBID (JOBID), the message ID, the specified statistical method (detection method), a threshold value, a determination method, the upper limit value, etc.

[0077] The control unit 102 is a CPU or the like that comprehensively controls the purchasing fraud detection business support device 100. The control unit 102 has an internal memory for storing control programs such as an OS, programs that define various processing procedures, and required data, and executes various information processing based on these stored programs.

[0078] The control unit 102 has, in terms of its functional concept, for example: (1) a purchase difference amount calculation unit 102a as a purchase difference amount calculation means for calculating the purchase difference amount for each combination of the confirmation target period and the supplier identification data by subtracting the amount obtained by aggregating the purchase amount corresponding to the purchase date belonging to the comparison target period for each supplier identification data from the amount obtained by aggregating the purchase amount corresponding to the purchase date belonging to the confirmation target period for each supplier identification data; and (2) a purchase difference amount calculation unit 102a that calculates the upper limit of the purchase difference amount calculated by the purchase difference amount calculation means in accordance with a predetermined statistical method. (3) an abnormality display unit 102c serving as an abnormality display means for displaying the purchase difference amount detected as an abnormal value by the abnormality detection means and the combination of the confirmation target period and the customer identification data corresponding to the detected purchase difference amount; and (4) a customer-specific graph display unit serving as a customer-specific graph display means for generating and displaying line graphs showing the trend of the aggregated amount for each period based on the purchase difference amount calculation result data, the number of which is equal to the number of the customer identification data. (5) a graph display unit 102d for comparing two years as a graph display means for comparing two years, which generates and displays a line graph showing the trend of the aggregated amount for each period in a year to be confirmed for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase difference amount calculation result data, and a line graph showing the trend of the aggregated amount for each period in a year to be compared for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means; and (6) a graph display unit 102e for comparing two years as a graph display means for comparing two years (7) a graph display unit 102f as a graph display unit by aggregation unit which generates and displays a line graph showing the transition of the aggregated amount for each period for the trading partner identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the amount aggregated data, the number of the graphs being the number of aggregation units; and (8) a bar graph showing the aggregated amount for the period corresponding to the purchase difference amount detected by the abnormal value detection means and the trading partner identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase method aggregated data,(8) a sales / purchase comparison graph display unit 102h as a sales / purchase comparison graph display means which generates and displays a line graph showing the trend of the aggregated amount for each period for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase aggregation record, generates a line graph showing the aggregated amount for each period based on the sales aggregation record, and displays both graphs together; and (9) an order / purchase comparison graph display unit 102i as an order / purchase comparison graph display means which generates a line graph showing the trend of the aggregated amount for each period for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase aggregation record, generates a line graph showing the aggregated amount for each period based on the order aggregation record, and displays both graphs together.

[0079] The purchase difference amount calculation unit 102a refers to purchase accounting data 106c (see Figure 12) which includes the purchase date, the payee, and the purchase amount, and aggregates the purchase amount corresponding to the purchase date belonging to the confirmation period (e.g., "2021 / 03" in the purchase accounting data 106c of Figure 12) for each payee, while aggregates the purchase amount corresponding to the purchase date belonging to the comparison period (e.g., "2020 / 03" in the purchase accounting data 106c of Figure 12) for each payee. Then, the purchase difference amount calculation unit 102a calculates the purchase difference amount (e.g., "10,000 yen") for each combination of the confirmation period (e.g., "2021 / 03") and the payment recipient by subtracting the aggregated latter amount (e.g., "5,000 yen" in the purchase accounting data 106c of Figure 12) from the aggregated former amount (e.g., "15,000 yen" in the purchase accounting data 106c of Figure 12).

[0080] The abnormal value detection unit 102b detects, according to a predetermined statistical method, any of the purchase difference amounts calculated by the purchase difference amount calculation unit 102a that exceeds an upper limit value as an abnormal value. The predetermined statistical method is not particularly limited, but is, for example, a method using the interquartile range. When the interquartile range is used, the upper limit value is, for example, a value calculated by adding a value obtained by multiplying the interquartile range by 1.5 to the third quartile.

[0081] The abnormality display unit 102c displays the purchase difference amount detected as an abnormal value by the abnormal value detection unit 102b and the combination of the confirmation target period and the payment destination corresponding to the detected purchase difference amount. At this time, the abnormality display unit 102c may also display the predetermined statistical method and the upper limit value.

[0082] The graph display unit 102d for each business partner generates Graph 1, which will be described later, based on the purchase difference amount calculation result data 106g (see FIG. 24) including the fiscal year and month, the payee, and the monthly purchase amount. That is, the graph display unit 102d for each business partner generates and displays line graphs showing the transition of the monthly purchase amount for each fiscal year and month, for the number of payees (see FIG. 31).

[0083] The vertical and horizontal axes of the line graph described in the previous paragraph are as follows: Vertical axis: Monthly total of purchase amount in the purchase difference amount calculation result data 106g Horizontal axis: The accounting year and month in the purchase difference amount calculation result data 106g

[0084] The graph display unit 102e for comparing two years generates Graph 2, which will be described later, based on the purchase difference amount calculation result data 106g. That is, the graph display unit 102e for comparing two years generates and displays a line graph (graph of "Purchase Actual Results" in FIG. 32) showing the trend of the monthly total purchase amount for each fiscal year and month for the payee corresponding to the purchase difference amount detected by the abnormal value detection unit 102b, and a line graph (graph of "Last Year's Purchase Actual Results" in FIG. 32) showing the trend of the monthly total purchase amount for the same month of the previous year for each fiscal year and month for the payee corresponding to the purchase difference amount detected by the abnormal value detection unit 102b, based on the purchase difference amount calculation result data 106g (see FIG. 24) including the fiscal year and month, the payee, the monthly total purchase amount, and the monthly total purchase amount for the same month of the previous year.

[0085] The monthly total purchase amount is the amount in the year to be confirmed (e.g., "FY2020") to which the confirmation target period (e.g., "2021 / 03") corresponding to the purchase difference amount (e.g., "10,000 yen") detected as an abnormal value by the abnormal value detection unit 102b belongs, among the amounts obtained by aggregating the purchase amounts in the purchase accounting data 106c by the fiscal year and month and the payee. On the other hand, the monthly total purchase amount for the same month of the previous year is the amount in the year prior to the year to be confirmed (e.g., "FY2019"), among the amounts obtained by aggregating the purchase amounts in the purchase accounting data 106c by the fiscal year and month and the payee.

[0086] The vertical and horizontal axes of the line graph described in the previous paragraph are as follows: Vertical axis: The monthly total of the purchase amount in the purchase difference amount calculation result data 106g or the monthly total of the purchase amount for the same month of the previous year Horizontal axis: Months without year display ("Year" is not displayed to display graphs for both years)

[0087] The graph display unit 102f generates graph 3, which will be described later, based on the purchase amount summary data 106h. That is, the graph display unit 102f generates and displays line graphs showing the transition of the summed amount (purchase amount) for each fiscal year and month for the payee (e.g., "Payee A") corresponding to the purchase difference amount (e.g., "10,000 yen") detected as an abnormal value by the abnormal value detection unit 102b, based on the purchase amount summary data 106h (see Figs. 26 and 40) including the fiscal year and month, the payee, the summary unit, and the summed amount (purchase amount) for the number of the summary units (see Figs. 33 and 43). Fig. 33 is a graph when the summary unit is "person in charge". Fig. 43 is a graph when the summary unit is "department".

[0088] The vertical and horizontal axes of the line graph described in the previous paragraph are as follows: Vertical axis: The amount (purchase amount) of the purchase amount summary data 106h Horizontal axis: Purchase amount summary data 106h accounting year and month

[0089] The purchase accounting method-specific graph display section 102g generates a graph 4, which will be described later, based on the purchase method-specific aggregated data 106i. That is, the purchase accounting method-specific graph display unit 102g generates and displays bar graphs showing the aggregated amount (purchase amount) for the fiscal year and month (e.g., "2021 / 03") corresponding to the purchase difference amount (e.g., "10,000 yen") detected as an abnormal value by the abnormal value detection unit 102b and the purchase difference amount (e.g., "Payee A") corresponding to the purchase difference amount (e.g., "10,000 yen") detected as an abnormal value by the abnormal value detection unit 102b based on the purchase method-specific aggregated data 106i (see FIG. 28 and FIG. 42) including the purchase method ("immediate purchase" or "purchase via order"), the accounting year and month, the payee, the aggregation unit, and the aggregated amount (purchase amount) for the payment destination (e.g., "Payee A") corresponding to the purchase difference amount (e.g., "10,000 yen") detected as an abnormal value by the abnormal value detection unit 102b, for the number of aggregation units (see FIG. 34 and FIG. 44). FIG. 34 is a graph when the aggregation unit is "person in charge". FIG. 44 is a graph when the aggregation unit is "department."

[0090] The key point in this bar graph is that, as shown in Figures 34 and 44, the aggregated amount corresponding to the immediate purchase category (the ``immediate purchase'' part in the bar graph) and the aggregated amount corresponding to the order via category (the ``purchase via order'' part in the bar graph) can be distinguished by different hatching.

[0091] The sales / purchase comparison graph display unit 102h generates a graph 5, which will be described later, based on the sales / purchase-specific aggregated data 106j. That is, the sales / purchase comparison graph display unit 102h generates a line graph (the graph of "purchase" in FIG. 35) showing the transition of the aggregated amount (purchase amount) for each fiscal year / month for the payee (e.g., "payee A") corresponding to the purchase difference amount (e.g., "10,000 yen") detected as an abnormal value by the abnormal value detection unit 102b, based on the purchase aggregate record (see FIG. 30) including the fiscal year / month, the payee, and the aggregated amount (purchase amount). Also, the sales / purchase comparison graph display unit 102h generates a line graph (the graph of "sales" in FIG. 35) showing the transition of the aggregated amount (sales amount) for each fiscal year / month, based on the sales aggregate record (see FIG. 30) including the fiscal year / month and the aggregated amount (sales amount). Then, the sales / purchase comparison graph display section 102h displays both of the generated graphs together (see FIG. 35).

[0092] The vertical and horizontal axes of the line graph described in the previous paragraph are as follows: Vertical axis: The aggregated amount (purchase amount) in the purchase summary record or the aggregated amount (sales amount) in the sales summary record Horizontal axis: The fiscal year and month in the purchase summary record or sales summary record

[0093] The order / purchase comparison graph display unit 102i generates a graph 5, which will be described later, based on the order / purchase specific aggregated data 106k. That is, the order / purchase comparison graph display unit 102i generates a line graph (the graph of "purchase" in FIG. 52) showing the transition of the aggregated amount (purchase amount) for each accounting month for the payee (e.g., "payee A") corresponding to the purchase difference amount (e.g., "10,000 yen") detected as an abnormal value by the abnormal value detection unit 102b, based on the purchase aggregate record (see FIG. 51) including the accounting month, the payee, and the aggregated amount (purchase amount). The order / purchase comparison graph display unit 102i also generates a line graph (the graph of "order" in FIG. 52) showing the transition of the aggregated amount (order amount) for each accounting month, based on the order aggregate record (see FIG. 51) including the accounting month and the aggregated amount (order amount). Then, the order / purchase comparison graph display unit 102i displays both the generated graphs together (see FIG. 52).

[0094] The vertical and horizontal axes of the line graph described in the previous paragraph are as follows: Vertical axis: The aggregated amount (purchase amount) in the purchase summary record or the aggregated amount (order amount) in the order summary record Horizontal axis: The fiscal year and month in the purchase summary record or order summary record

[0095] [3. Processing Overview and Screen Configuration] [3-1. Processing Overview] In this embodiment, "purchase results by payee" is output. In addition, in this embodiment, for example, "purchase results by person in charge or organization recorded as payee" may be output. Information for which an abnormality has been detected may be highlighted by changing the color or font size so that the abnormality can be recognized at a glance. The data to be detected is, for example, the difference between the purchase amount for the month being checked for each combination of month and payee, and the purchase amount for the month being compared for each combination of month and payee (for example, the same month of the previous year). Payees for which the difference is abnormally large are detected.

[0096] [3-2. Screen composition] In this embodiment, the displayed screen changes in the following order: (1)→(2).

[0097] (1) Display of anomaly detection results First, as shown by A in the example screen in Figure 4, the results of anomaly detection are displayed at summary message level. The area shown by A in Figure 4 is the area that displays messages related to the anomaly detection process. Specifically, this area displays the timing at which the anomaly was detected, the payee, and the difference with the purchase amount for the same month of the previous year. Note that if multiple pieces of information are detected as anomalies, the multiple pieces of information are displayed vertically, as shown by A in Figure 4. This area only displays the anomaly detection results on a summary basis, so if you want to see the anomaly detection results on a detailed basis, you need to select the summary message and switch screens.

[0098] (2) Display of business data related to detected abnormal information It then displays detailed messages and graphs necessary for analyzing the detected abnormal information.

[0099] The area shown in the lower half of A in Fig. 5 is an area that displays a detailed message regarding the anomaly detection result. This area displays the "detection method used to detect the anomaly" and "key information of the data in which the anomaly was detected", etc. If multiple pieces of information are detected as an anomaly, a summary message will be displayed for each anomaly, but a detailed message will only be displayed for the one selected from the displayed summary messages. Furthermore, after the detailed message is displayed, the following graphs B to F are displayed.

[0100] The graph shown in area B of Figure 5 is a graph that outputs the purchase amount for each payee. In other words, it is a graph for checking "the trend in monthly purchase amounts for each payee." This graph makes it possible to compare the trend in purchase amounts for payees detected as abnormal and for normal payees.

[0101] The graph shown in area C of Figure 5 is a graph that outputs the purchase amount for a specific payee in the year in which the anomaly was detected and the purchase amount for the year prior to the year in which the anomaly was detected. In other words, this graph is used to compare and confirm the trends in the "purchase amount for the year in which anomaly detection is performed" and the "purchase amount for the year prior to the current year." This graph makes it possible to compare the purchase amount for the same month of the previous year.

[0102] The graph shown in area D of Figure 5 is a graph that outputs the purchase amount by employee who recorded purchases to a specific payee. In other words, it is a graph for checking "the trend of monthly purchase amounts by employee." This graph makes it possible to check whether purchase amounts are concentrated in a specific employee. Specifically, if there is an employee who colludes with a payee, it can be confirmed that the purchase amount for that employee is abnormally high.

[0103] The graph shown in area E of Figure 5 is a graph that outputs the purchase amount by "purchase accounting method" for each employee who recorded purchases to a specific payee. In other words, this graph is for checking the "purchase amount corresponding to immediate purchase" and the "purchase amount corresponding to purchase via order" for each employee within a single month. This graph makes it possible to check whether there are any employees who have recorded a large amount of purchases as "immediate purchase," which is difficult to check the transaction details until the purchase transaction is completed.

[0104] The graph shown in area F in Figure 5 is a graph that outputs the total sales amount and the purchase amount of a specific payee. In other words, it is a graph for checking "monthly trends in the total sales amount and the purchase amount of a specific payee." With this graph, if purchases are increasing, it is possible to check whether the increase in purchases is due to an increase in sales (= normal increase).

[0105] Area G in FIG. 5 is an area for setting extraction conditions for data extraction. In other words, this area is used when you want to display the results of data extraction by changing the conditions for the graphs displayed in areas B to F in FIG. 5. Specifically, if you want to display a graph at the organization level, "office" or "department" is specified, whereas if you want to display a graph at the person in charge level, "person in charge" is specified. Also, if you want to check the sales amount (= if you want to display a graph of the sales amount in the graph shown in area F in FIG. 5), "sales" is specified, whereas if you want to check the sales amount that will occur in the future as the order amount (= if you want to display a graph of the order amount in the graph shown in area F in FIG. 5), "order" is specified.

[0106] [4. Specific examples of processing] In this section, a specific example of the process according to this embodiment will be described. In [4-1], the process (anomaly detection process) of automatically detecting a payee for which the difference between the purchase amount in the month to be confirmed and the purchase amount in the same month of the previous year is abnormally large by checking the contents of the purchase accounting data 106c in the business data will be described. In [4-2], the process (analysis screen display process) of displaying the detected abnormal data and data related to the abnormal data that was referenced for the detection on the analysis screen will be described.

[0107] [4-1: Anomaly detection processing] (1) Pre-settings As a presetting, information required for anomaly detection is stored in advance in a table. In this example, it is assumed that automatic detection execution schedule data 106a and acquisition range condition data 106b are set as shown in FIG.

[0108] (2) Automatic execution (2-1) Acquisition of automatic detection execution schedule data 106a First, the automatic detection execution schedule data 106a set in (1) is automatically acquired. Specifically, if "detection ID: AB001, schedule ID: SH001" is set as parameters as shown in Fig. 9, the automatic detection execution schedule data 106a shown in Fig. 9 is automatically acquired as data having the detection ID and schedule ID.

[0109] (2-2) Determine whether it is time to detect an abnormality Next, it is determined whether the timing automatically acquired in (2-1) is the timing to detect an abnormality. Specifically, it is assumed that the timing automatically acquired in (2-1) is "2021 / 04 / 07 (the fifth business day of April)." It is possible to determine holidays and business days by referencing the calendar master in the business database, and it is assumed that the calendar master is always updated based on the sales business calendar.

[0110] Here, referring to the automatic detection execution schedule data 106a in Fig. 9 that was automatically acquired in (2-1), the execution condition is "the fifth business day of every month." In this way, if the timing at which the automatic detection execution schedule data 106a was automatically acquired matches the timing defined by the execution condition set in the automatic detection execution schedule data 106a, the execution determination result is "execute," and the processing from (2-3) onward is executed. On the other hand, if there is no match, the execution determination result is "do not execute," and the processing ends.

[0111] (2-3) Acquire the range conditions of data to detect anomalies Next, the acquisition range condition data 106b set in (1) is automatically acquired. Specifically, the acquisition range condition data 106b shown in FIG. 10 is automatically acquired as data having the parameters "detection ID: AB001, schedule ID: SH001" set in (2-1).

[0112] (2-4) Detection of payees with abnormally high purchase difference amounts Finally, the purchase accounting data 106c in the business data is referenced to detect payees with abnormally high purchase difference amounts. In this example, the purchase accounting data 106c is set and saved as shown in FIG.

[0113] (2-4-1) Calculation of purchase difference amount First, the purchase difference amount calculation unit 102a calculates the purchase difference amount by referring to the purchase appropriation data 106c in Fig. 12. The calculation formula for the purchase difference amount is, for example, "purchase amount of the month to be confirmed - purchase amount of the same month of the previous year".

[0114] Specifically, in the purchase accounting data 106c of FIG. 12, when 2021 / 03 is viewed as the month to be confirmed, the purchase date belonging to 2021 / 03 is 2021 / 03 / 15. On the other hand, the purchase date belonging to 2020 / 03, which is the same month of the previous year as the month to be confirmed, is 2020 / 03 / 15. Since the purchase amount on 2021 / 03 / 15 is 15,000 yen, the purchase amount for the confirmation month 2021 / 03 is 15,000 yen. On the other hand, since the purchase amount on 2020 / 03 / 15 is 5,000 yen, the purchase amount for the same month of the previous year 2020 / 03 is 5,000 yen.

[0115] Here, based on the "Acquisition range condition data 106b of purchase appropriation data" shown in FIG. 10 automatically acquired in (2-3), the parameters "Extraction condition column: accounting year / month, FROM condition: 2020 / 04, TO condition: 2021 / 03" are automatically set as shown in FIG. 11. In this case, the purchase difference amount calculation unit 102a uses the above calculation formula to calculate the purchase difference amount for each payment destination for the confirmation target month 2020 / 04 to 2021 / 03. For example, taking the confirmation target month 2021 / 03 as an example, the purchase difference amount calculation unit 102a calculates the purchase difference amount for the confirmation target month 2021 / 03 and payment destination A as 10,000 yen by subtracting the purchase amount of 5,000 yen for the same month of the previous year 2020 / 03 from the purchase amount of 15,000 yen for the confirmation target month 2021 / 03.

[0116] FIG. 12 shows an example of purchase difference calculation result data 106g generated by calculating the purchase difference amount for each combination of the confirmation month and the payment destination in this manner.

[0117] (2-4-2) Detection of abnormal values Next, an upper limit is obtained from the purchase difference amount calculation result data 106g using the "quartile range," which is one of the statistical methods, and an abnormal value is detected based on the upper limit. FIG. 13 is a diagram showing how to obtain the upper limit (5,000 yen) when focusing on payee A in the purchase difference amount calculation result data 106g of FIG. 12. As shown in FIG. 13, when the purchase difference amount for payee A is plotted in a box-and-whisker plot, the purchase difference amount of 10,000 yen for March 2021 exceeds the upper limit value of 5,000 yen. Therefore, the abnormal value detection unit 102b detects the purchase difference amount of 10,000 yen for March 2021 as an abnormal value.

[0118] In the example in the previous paragraph, for simplicity, only the detection of anomalies for payee A was described, but in actual processing, the abnormal value detection unit 102b detects abnormal values ​​for all payees included in the purchase difference amount calculation result data 106g. Also, in this embodiment, when the amount to be paid decreases (when the purchase amount is less in the month to be confirmed than in the same month of the previous year), there is no need to check, so a lower limit is not obtained when detecting abnormal values.

[0119] Here, three representative statistical methods will be described. First, standard deviation is a method of taking the distribution of values ​​at a certain point, setting a confidence interval, and judging normality or abnormality. Standard deviation is an analysis method that does not include the concept of a time axis, so it is not suitable for cross-sectional data analysis of "tendencies from the past". Secondly, the interquartile range used in this example is a method of determining the analysis range of data, consolidating it on the vertical axis, determining the quartile range, and specifying the range magnification that can be judged as normal. The interquartile range is compatible with cross-sectional data analysis because it treats both time series data and point data as vertical axis elements. Thirdly, moving average + outlier is a method of determining a range for taking an average value and calculating it for each time series. Although moving average + outlier requires a threshold value for judging abnormality from the average value to be set in advance, it is possible to detect abnormal increases and decreases in the transition of the time series. In this embodiment, the interquartile range and moving average + outlier are raised as candidates, but for moving average + outlier, the user needs to set a threshold value for the average value for judging abnormality. For this reason, in this embodiment, it is preferable to employ an interquartile range that can automatically calculate a threshold value and determine an abnormality.

[0120] (2-4-3) Saving abnormal values Finally, the abnormal value detection unit 102b saves information such as the abnormality determination result (accounting year and month: 2021 / 03, payee: payee A, purchase difference amount: 10,000 yen) in a table, and at the same time saves a message to be displayed on the analysis screen. Abnormality determination result data 106m, abnormality determination result message data 106n, and abnormality determination result message detail data 106p generated by saving the abnormality determination result are shown in FIG. 14.

[0121] [4-2: Analysis screen display processing] (1) Displaying a summary message Next, information that is automatically detected as an anomaly from the purchase accounting data 106c in the business data is output to the initial analysis screen. The acquisition and display of the initial analysis screen will be described in detail below in (1-1) to (1-3).

[0122] (1-1) Acquiring a message when an abnormality is detected First, as a parameter, "JOBID: purchase alert" is set as shown in FIG. 15. Note that in order to display the detected information in a list, the detection ID is assumed to be in an unset state as shown in FIG. 15. In this case, the abnormality display unit 102c acquires the abnormality determination result data 106m, abnormality determination result message data 106n, and abnormality determination result message detail data 106p in FIG. 14 generated in (2-4-3) of [4-1] as data having "JOBID: purchase alert". These acquired data are also shown in FIG. 16.

[0123] (1-2) Displaying a message on the screen when an abnormality is detected Next, the anomaly display unit 102c displays the degree of anomaly "X", the definition name "Purchase Rate", the summary "Payee A detected", and the detection target "2021 / 03 Payee A 10,000 yen" in the anomaly determination result message data 106n of Fig. 16 acquired in (1-1) on the initial analysis screen shown in Fig. 16. The displayed degree of anomaly, definition name, summary, and detection target are collectively referred to as a summary message.

[0124] This allows the operator to know that there was a payee with an abnormally large purchase difference amount, and who that payee is (in this example, payee A). At this time, the operator can also know the accounting month and year in which the abnormality occurred (in this example, 2021 / 03) and the numerical value of the purchase difference amount detected as an abnormal value (in this example, 10,000 yen).

[0125] (1-3) Setting the base date After the abnormality is displayed, the date when the initial analysis screen was launched (2021 / 04 / 10) is set as the reference date in the extraction condition area on the initial analysis screen, as shown in Figure 17.

[0126] (2) Displaying detailed messages and graphs Next, a detailed message and five graphs are output to the analysis screen. The display of the detailed message and the acquisition and display of the five graphs will be explained below in (2-1) to (2-7).

[0127] (2-1) Displaying detailed messages and securing the area for graph output 1. First, when the summary message displayed in (1-2) is selected, an analysis screen is launched. The abnormality display unit 102c displays the detection method "interquartile range", the threshold "1.5 times normal range", and the upper limit "5,000 yen" in the abnormality determination result message detailed data 106p acquired in (1-1) on the analysis screen shown in Fig. 18. The displayed detection method, threshold, and upper limit are collectively referred to as a detailed message.

[0128] In this way, by displaying the summary message explained in (1-2) and the detailed message explained in this section (2-1), the operator can understand the subject (payee) for which an anomaly was detected, the detection method (calculation method), the benchmark value (purchase difference amount) for which it was judged to be abnormal, etc. This enables the operator to begin analysis while knowing which payees have abnormal purchase difference amounts. The purchase amounts of payees with abnormal purchase difference amounts and the past performance that is the basis for judging an anomaly can be analyzed using the five graphs explained below.

[0129] 2. Next, an output area for the graphs is secured. In this embodiment, five graphs are output, so an output area for five graphs is secured, as shown by the five blank spaces on the analysis screen in FIG.

[0130] (2-2) Setting extraction conditions Next, in order to output a graph, it is necessary to extract the data to be output from the analysis data. Prior to the extraction, however, the extraction conditions are set using the method described in this section (2-2).

[0131] 1. First, the range of data to be analyzed is obtained based on the accounting year and month (2021 / 03) held by the anomaly determination result data 106m in Figure 16 that is linked to the summary message displayed in (1-2).

[0132] (i) Specifically, the accounting year and month within a range of one year before and after the accounting year and month (2021 / 03) in which the anomaly was detected is acquired as the acquisition range. In other words, the accounting year and month one year ago is 2020 / 03, and the accounting year and month one year later is 2022 / 03.

[0133] The setting of acquiring accounting dates within a range of one year before and after is in accordance with the condition of detecting within a one-year range in the "Acquisition range condition data for purchase accounting data 106b," which is data provided in advance for anomaly detection. If you wish to expand the range for analysis, you can do so by changing the start date and end date of the period in the extraction condition area on the analysis screen.

[0134] (ii) Based on the acquired acquisition range (2020 / 03 to 2022 / 03), the analysis data acquisition range condition is set by narrowing down the range in which the analysis data exists. In this example, it is assumed that the analysis data exists only in the range of 2020 / 04 to 2021 / 03. In this case, the analysis data acquisition range condition is as follows, as shown in FIG. 20: · Extraction criteria column: Fiscal year / month FROM condition: 2020 / 04 (adopted from the month after 2020 / 03, which is the fiscal year month one year prior to the above) TO Condition: 2021 / 03 (hired from the month before 2022 / 03, which is the fiscal year one year later) It becomes.

[0135] 2. Next, the analysis data acquisition range conditions set in "1." are set as initial values, which become the extraction condition initial values ​​(base date, period start, and period end). The extraction condition initial values ​​are shown in Figure 21. These extraction condition initial values ​​are then set in the extraction condition area on the analysis screen, as shown in Figure 22. Note that the period start date and period end date set in this area can be manually changed by the operator.

[0136] Then, when the display switches to the graph display state, the extraction items for extracting data for graph output are displayed. As shown in Fig. 22, the "person in charge" is set as the aggregation unit and "sales" is set as the aggregation target and displayed as the fixed initial values. In this example (2), these are assumed to remain the fixed initial values ​​and are not changed.

[0137] Next, the data for analysis is obtained based on the extraction conditions set in (2-2). Below, each graph is defined as follows. A line graph showing the change in monthly purchase amount for each payee is called "Graph 1". A line graph showing the purchase amount for the previous year and the purchase amount for the current year for a specific payee is called "Graph 2". A line graph showing the change in monthly purchase amount for each organization or person in charge for a specific payee is called "Graph 3". A bar graph showing the purchase amount by purchase accounting method for each organization or person in charge for a specific month and a specific payee is called "Graph 4". A line graph showing total sales or total orders and a line graph showing the purchase amount for a specific payee is called "Graph 5".

[0138] The acquisition of the data used to generate graphs 1 and 2 is described below in (2-3), the acquisition of the data used to generate graph 3 is described below in (2-4), the acquisition of the data used to generate graph 4 is described below in (2-5), and the acquisition of the data used to generate graph 5 is described below in (2-6).

[0139] (2-3) Acquiring the data that will be used to generate graphs 1 and 2 Based on the extraction conditions set in (2-2) (shown again in the example screen of FIG. 23), parameters for acquiring graphs 1-2 are set as shown in FIG. 23. In the parameters shown in FIG. 23, the period start "2020 / 04", period end "2021 / 03", and aggregation mode "Person in Charge" are set based on the extraction conditions set in (2-2).

[0140] Then, based on the set parameters shown in FIG. 23, purchase difference amount calculation result data 106g, which is the data from which graphs 1 to 2 are generated, is generated as follows.

[0141] That is, the purchase difference calculation unit 102a calculates the purchase difference amount by referring to the purchase appropriation data 106c in Fig. 24. The calculation formula for the purchase difference amount is, for example, "purchase amount of the month to be confirmed - purchase amount of the same month of the previous year".

[0142] Specifically, in the purchase accounting data 106c of FIG. 24, when 2021 / 03 is viewed as the month to be confirmed, the purchase date belonging to 2021 / 03 is 2021 / 03 / 15. On the other hand, the purchase date belonging to 2020 / 03, which is the same month of the previous year as the month to be confirmed, is 2020 / 03 / 15. Since the purchase amounts on 2021 / 03 / 15 are 2,200 yen, 2,500 yen, and 10,300 yen, the purchase amount for the confirmation month 2021 / 03 is the sum of these, which is 15,000 yen. On the other hand, the purchase amounts on 2020 / 03 / 15 are 1,800 yen, 1,600 yen, and 1,600 yen, so the purchase amount for the same month of the previous year 2020 / 03 is the sum of these, which is 5,000 yen.

[0143] Here, as shown in the parameters of Fig. 23, in this example, the start of the period is set to "2020 / 04" and the end of the period is set to "2021 / 03", so the purchase difference amount calculation unit 102a uses the above calculation formula to calculate the purchase difference amount for each payment destination for the confirmation target month 2020 / 04 to 2021 / 03. For example, taking the confirmation target month 2021 / 03 as an example, the purchase difference amount calculation unit 102a calculates the purchase difference amount for the confirmation target month 2021 / 03 and payment destination A to be 10,000 yen by subtracting the purchase amount of 5,000 yen for the same month of the previous year 2020 / 03 from the purchase amount of 15,000 yen for the confirmation target month 2021 / 03.

[0144] FIG. 24 shows an example of purchase difference calculation result data 106g generated by calculating the purchase difference amount (monthly total purchase difference amount) for each combination of confirmation month and payee in this manner.

[0145] When generating purchase difference amount calculation result data 106g, the purchase difference amount calculation unit 102a includes in the purchase difference amount calculation result data 106g the amount obtained by aggregating the purchase amount for the current year (2020) for each combination of month and payee (monthly purchase amount total), and the amount obtained by aggregating the purchase amount for the previous year (2019) for each combination of month and payee (monthly purchase amount total for the same month of the previous year).

[0146] In this example, as shown in purchase difference amount calculation result data 106g in Figure 24, an example has been described in which the monthly purchase amount total, the monthly purchase amount total for the same month of the previous year, and the monthly purchase difference amount are calculated for each combination of month and payee, but these amounts may also be calculated for each combination of month, payee, and person in charge.

[0147] (2-4) Acquiring the data to generate Graph 3 Based on the extraction conditions set in (2-2) (shown again in the example screen of FIG. 25), parameters for acquiring Graph 3 are set as shown in FIG. 25. In the parameters shown in FIG. 25, the start of the period "2020 / 04", the end of the period "2021 / 03", and the aggregation mode "Person in Charge" are set based on the extraction conditions set in (2-2).

[0148] Then, based on the set parameters shown in FIG. 25, the purchase amount summary data 106h, which is the data from which Graph 3 is generated, is generated as follows.

[0149] That is, by referring to the purchase accounting data 106c in Fig. 26, the purchase amount is tallied for each combination of accounting year / month, payee, and person in charge in the range of 2020 / 04 to 2021 / 03. The accounting year / month, payee, person in charge, and tallied purchase amount are stored, thereby generating the purchase amount tallied data 106h in Fig. 26.

[0150] (2-5) Acquiring the data to generate Graph 4 Based on the extraction conditions set in (2-2) (shown again in the example screen of FIG. 27), parameters for acquiring Graph 4 are set as shown in FIG. 27. In the parameters shown in FIG. 27, the period start "2020 / 04", the period end "2021 / 03", and the aggregation mode "Person in Charge" are set based on the extraction conditions set in (2-2), and the specified accounting year and month "2021 / 03" is set based on the anomaly determination result data 106m.

[0151] Then, based on the set parameters shown in FIG. 27, the purchase method-specific aggregate data 106i, which is the data from which graph 4 is generated, is generated as follows.

[0152] That is, referring to the purchase accounting data 106c of FIG. 28, the purchase amount is tallied for each combination of purchase method, accounting year and month, payee, and person in charge in the range of 2020 / 04 to 2021 / 03. Here, for records in which no purchase order number is input in the purchase accounting data 106c of FIG. 28, the purchase method is tallied as "immediate purchase", whereas for records in which a purchase order number is input in the purchase accounting data 106c of FIG. 28, the purchase method is tallied as "purchase via order". Note that for purchase records in which a purchase order number is input in the purchase accounting data 106c, a record of an order corresponding to the purchase order number exists in the order accounting data 106d of FIG. 28. The purchase method, the accounting year and month, the payee, the person in charge, and the tallied purchase amount are stored, and the purchase method-specific tallied data 106i of FIG. 28 is generated.

[0153] (2-6) Acquiring the data to generate Graph 5 Based on the extraction conditions set in (2-2) (shown again in the example screen of FIG. 29), parameters for obtaining Graph 5 are set as shown in FIG. 29. In the parameters shown in FIG. 29, the period start "2020 / 04", the period end "2021 / 03", and the aggregation mode "Sales" have been set based on the extraction conditions set in (2-2), and the designated payee "Payee A" has been set based on the anomaly determination result data 106m.

[0154] Then, based on the set parameters shown in FIG. 29, the sales and purchase-specific aggregated data 106j, which is the data from which the graph 5 is generated, is generated as follows.

[0155] That is, by referring to the purchase accounting data 106c in FIG. 30, purchase amounts are tallied for each combination of accounting year / month and payee in the range of 2020 / 04 to 2021 / 03. Note that this tallying is only performed for the payee specified in the parameters shown in FIG. 29 (in this example, "Payee A"). The data classification "Purchases", the accounting year / month, the payee, and the tallied purchase amount are stored in sales / purchase-specific tallied data 106j in FIG. 30.

[0156] In addition, because the aggregation mode specified in the parameters shown in Fig. 29 is "Sales," the sales amount is aggregated for each accounting year and month in the range of 2020 / 04 to 2021 / 03, with reference to the sales posting data 106e in Fig. 30. The data classification "Sales," the accounting year and month, and the aggregated sales amount are stored in sales and purchase-specific aggregated data 106j in Fig. 30.

[0157] In this manner, the sales and purchase-specific aggregate data 106j shown in FIG. 30 is generated.

[0158] (2-7) Graph output (display) Next, five graphs are output based on the data generated in (2-3) to (2-6).

[0159] 1. Data binding information used when binding data to graph 1 and the generated graph 1 are shown in Fig. 31. The business partner-specific graph display unit 102d generates and displays line graphs with the monthly total purchase amount in the purchase difference amount calculation result data 106g in Fig. 24 on the vertical axis and the accounting year and month in the purchase difference amount calculation result data 106g in Fig. 24 on the horizontal axis, for the number of payees.

[0160] By looking at Graph 1, the operator can check the purchase amount status of the payee for which an anomaly was detected. In addition, by comparing by month, the difference in the purchase amount status between the month in which the anomaly was detected and other months can be compared. Graph 1 in Figure 31 shows that the purchase amount for payee A in March 2021 was abnormally high.

[0161] 2. Data binding information used when binding data to graph 2 and the generated graph 2 are shown in FIG. 32. The graph display unit 102e for comparing two years generates a line graph (the line graph of "Purchase Actual Results" in FIG. 32) with the total monthly purchase amount in the purchase difference amount calculation result data 106g in FIG. 24 as the vertical axis and the month as the horizontal axis for the current year (2020) and payee A. In addition, the graph display unit 102e for comparing two years generates a line graph (the line graph of "Last Year's Purchase Actual Results" in FIG. 32) with the total monthly purchase amount in the same month of the previous year in the purchase difference amount calculation result data 106g in FIG. 24 as the vertical axis and the month as the horizontal axis for the last year (2019) and payee A. Then, the graph display unit 102e for comparing two years displays both of the generated graphs together as graph 2. In Graph 2, in order to compare the current fiscal year with last year, only "month" is displayed on the horizontal axis, not "year."

[0162] In Graph 2, "FY2020" displayed in the top header is based on the accounting year and month "2021 / 03" held by the anomaly judgment result data 106m in Fig. 16. In other words, by referencing the monthly period master data in the business database, it is determined that the accounting year to which the accounting year and month "2021 / 03" belongs is "FY2020." Note that the monthly period master data is always updated.

[0163] In graph 2, “Payee A” displayed in the upper header is based on the payee “Payee A” held in the abnormality determination result data 106m in FIG.

[0164] By looking at Graph 2, the operator can compare the purchase amount in the year in which the abnormality was detected and the purchase amount of the previous year from the perspective of the year in which the abnormality was detected. In other words, by comparing by month, it is possible to confirm the difference in the occurrence situation with the purchase amount for the same month of the previous year. Graph 2 in Figure 32 shows that the purchase amount in March 2021 for the year in which the abnormality was detected (FY2020, which corresponds to the line graph of "Purchase Results") is significantly higher than the purchase amount in March 2020 for the previous year (FY2019, which corresponds to the line graph of "Last Year's Purchase Results").

[0165] 3. Data binding information used when binding data to graph 3 and the generated graph 3 are shown in Fig. 33. The aggregation unit graph display unit 102f generates and displays line graphs, the number of which corresponds to the number of managers, with the purchase amount in the purchase amount aggregation data 106h in Fig. 26 (i.e., "the aggregated purchase amount" in (2-4)) on the vertical axis and the accounting year and month in the purchase amount aggregation data 106h in Fig. 26 on the horizontal axis.

[0166] In graph 3, “Payee A” displayed in the upper header is based on the payee “Payee A” held in the abnormality determination result data 106m in FIG.

[0167] By looking at Graph 3, the operator can check the purchase records for each person who recorded purchases for the payee for which an anomaly was detected. In other words, the purchase records for each person in the month in which the anomaly was detected can be checked. If the purchase records of a specific person are abnormally high compared to the purchase records of other people, this suggests the possibility that the specific person is colluding with the payee for which an anomaly was detected. Graph 3 in Figure 33 shows that the purchase records of person C in March 2021 are abnormally high compared to the purchase records of other people A and B, which suggests the possibility that person C is colluding with payee A.

[0168] 4. Data binding information used when binding data to graph 4 and the generated graph 4 are shown in Fig. 34. The purchase accounting method-specific graph display unit 102g generates and displays a bar graph with the purchase amount in the purchase method-specific aggregation data 106i in Fig. 28 (i.e., "the aggregated purchase amount" in (2-5)) on the vertical axis for each person in charge.

[0169] The key point in Graph 4 is that it is possible to distinguish between the purchase amount corresponding to "immediate purchase" and the purchase amount corresponding to "purchase via order."

[0170] In Graph 4, "2021 / 03" displayed in the upper header is based on the accounting year and month "2021 / 03" held in the anomaly determination result data 106m in Fig. 16. In addition, "Payee A" displayed in the upper header is based on the payee "Payee A" held in the anomaly determination result data 106m in Fig. 16.

[0171] By looking at graph 4, the operator can check the purchase record by "payment method" for each person in charge for the month and payee where the abnormality was detected. Here, in the case of immediate purchase without ordering, since confirmation processing after ordering is not performed, it is difficult to detect fraud by using immediate purchase. Therefore, it is highly likely that a person who records a large purchase amount by immediate purchase is committing fraud. Specifically, when comparing the purchase record by purchase recording method between a specific person in charge and other people, if the proportion of immediate purchase is high only for a specific person in charge, it is highly likely that the specific person in charge is committing fraud. From graph 4 in Figure 34, it can be seen that the proportion of immediate purchase is abnormally high only for person C, so it can be read that person C is committing fraud by using immediate purchase.

[0172] 5. Data binding information used when binding data to graph 5 and the graph 5 thus generated are shown in FIG. 35. The sales / purchase comparison graph display unit 102h generates a line graph (the "Purchase" line graph in FIG. 35) for payee A, in which the amount in the sales / purchase aggregated data 106j in FIG. 30 (i.e., the "aggregated purchase amount" in (2-6)) is used as the vertical axis and the accounting year / month in the sales / purchase aggregated data 106j in FIG. 30 is used as the horizontal axis. The sales / purchase comparison graph display unit 102h also generates a line graph (the "Sales" line graph in FIG. 35) in which the amount in the sales / purchase aggregated data 106j in FIG. 30 (i.e., the "aggregated sales amount" in (2-6)) is used as the vertical axis and the accounting year / month in the sales / purchase aggregated data 106j in FIG. 30 is used as the horizontal axis. Then, the sales / purchase comparison graph display section 102h displays both of the generated graphs together as graph 5.

[0173] In Graph 5, the line graph for "Purchase" is a graph based on the amount for the payee "Payee A" held in the abnormality determination result data 106m in FIG.

[0174] By looking at Graph 5, the operator can check the sales amount and the purchase amount of the payee for which an anomaly was detected. In other words, the difference in the trend of the sales amount and the purchase amount can be confirmed between months in which an anomaly was detected and months in which an anomaly was not detected. Here, if there is a purchase fraud, the increase in the purchase amount is often not accompanied by an increase in the sales amount. From Graph 5 in Figure 35, it can be seen that the purchase amount for 2021 / 03 has increased even though the sales amount for 2021 / 03 is the same as other accounting years and months, so it can be read that there is a possibility that a purchase fraud is taking place in 2021 / 03.

[0175] 6. The generated graphs 1 to 5 are displayed in a list on the analysis screen, as shown in FIG.

[0176] 7. Data for which an abnormality has been detected may be highlighted (for example, displayed in a different color) based on the payee information included in the abnormality determination result data 106m linked to the abnormality determination result message detail data 106p. For example, when displaying Graph 1, as shown in Figure 37, a setting may be made such that for payees for which an abnormality has been detected (= payees included in the abnormality determination result data 106m), the color (red) of the abnormality flag in the legend indicates that the payee is true, and for payees other than those for which an abnormality has been detected, the color (gray) of the abnormality flag in the legend indicates that the payee is false. In this example, in Graph 1, the line graph for payee A for which an abnormality has been detected is displayed in red.

[0177] Furthermore, when displaying Graph 4, the purchase amount corresponding to "immediate purchase" is displayed with the abnormality flag in the legend in the color True (red), while the purchase amount corresponding to "purchase via order" is displayed with the abnormality flag in the legend in the color False (gray). This is because "immediate purchase", which does not go through the order confirmation flow, is a form of purchase that is easily used fraudulently, and so needs to be highlighted.

[0178] (3) Switching graph display Next, switching the display of analysis graphs will be explained in the following (3-1) and (3-2). In the explanation so far, we have explained the case where "person in charge" is specified as the aggregation unit and "sales" is specified as the aggregation target. In contrast, in the following (3-1), we will explain the case where "department" is specified as the aggregation unit and "sales" is specified as the aggregation target. In the following (3-2), we will explain the case where "department" is specified as the aggregation unit and "orders" is specified as the aggregation target.

[0179] (3-1) Display of analysis graph when "department" is specified as the aggregation unit and "sales" is specified as the aggregation target In this section (3-1), we will mainly explain an example of checking the amount of money aggregated by department, which is a type of organizational unit, using graphs 3 and 4. Note that the processing in this section (3-1) is assumed to be carried out following the processing in (2).

[0180] 1. First, as shown in the example screen of FIG. 38, in the area for setting extraction conditions on the analysis screen, "department" is selected as the aggregation unit. In other words, the aggregation unit is changed from "person in charge" to "department." However, as shown in the example screen of FIG. 38, the aggregation target remains unchanged at "sales." Furthermore, as shown in the example screen of FIG. 38, the start of the period remains unchanged at "2020 / 04," and the end of the period remains unchanged at "2021 / 03."

[0181] 2. Based on the set extraction conditions, parameters for acquiring graphs 1 to 2 are set as shown in Figure 38. In the parameters shown in Figure 38, the start of the period "2020 / 04", the end of the period "2021 / 03", and the aggregation mode "department" are set based on the extraction conditions described in the previous paragraph.

[0182] Then, based on the set parameters shown in Figure 38, purchase difference amount calculation result data 106g, which is the data used to generate graphs 1 to 2, is generated. However, the method of generation and the contents of the generated data are the same as those described in (2-3) with reference to Figure 24, so description thereof will be omitted.

[0183] 3. Next, based on the extraction conditions set in "1", parameters for acquiring Graph 3 are set as shown in Fig. 39. In the parameters shown in Fig. 39, the start of the period "2020 / 04", the end of the period "2021 / 03", and the aggregation mode "department" are set based on the extraction conditions described in "1".

[0184] Then, based on the set parameters shown in FIG. 39, the purchase amount summary data 106h, which is the data from which Graph 3 is generated, is generated as follows.

[0185] That is, by referring to the purchase accounting data 106c in Fig. 40, the purchase amount is tallied for each combination of accounting month, payee, and department in the range of 2020 / 04 to 2021 / 03. The accounting month, payee, department, and tallied purchase amount are stored, thereby generating the purchase amount tallied data 106h in Fig. 40.

[0186] The key point here is that in (2-4), the purchase amount was tallied for each combination of accounting year / month, payee, and “person in charge,” whereas in item “3,” the purchase amount was tallied for each combination of accounting year / month, payee, and “department.”

[0187] 4. Next, based on the extraction conditions set in "1", parameters for acquiring Graph 4 are set as shown in Fig. 41. In the parameters shown in Fig. 41, the period start "2020 / 04", the period end "2021 / 03", and the aggregation mode "department" are set based on the extraction conditions described in "1", and the designated accounting year and month "2021 / 03" is set based on the anomaly determination result data 106m.

[0188] Then, based on the set parameters shown in FIG. 41, the purchase method-specific aggregated data 106i, which is the data from which graph 4 is generated, is generated as follows.

[0189] That is, referring to the purchase accounting data 106c in FIG. 42, the purchase amount is tallied for each combination of purchase method, accounting year and month, payee, and department in the range of 2020 / 04 to 2021 / 03. Here, for records in which no purchase order number is input in the purchase accounting data 106c in FIG. 42, the purchase method is tallied as "immediate purchase", whereas for records in which a purchase order number is input in the purchase accounting data 106c in FIG. 42, the purchase method is tallied as "purchase via order". Note that for purchase records in which a purchase order number is input in the purchase accounting data 106c, a record of an order corresponding to the purchase order number exists in the order accounting data 106d in FIG. 42. The purchase method, the accounting year and month, the payee, the department, and the tallied purchase amount are stored, and the purchase method-specific tallied data 106i in FIG. 42 is generated.

[0190] The key point here is that in (2-5), the purchase amount was tallied for each combination of purchase method, accounting month, payee and “person in charge,” whereas in item “4,” the purchase amount was tallied for each combination of purchase method, accounting month, payee and “department.”

[0191] 5. Next, based on the extraction conditions set in "1", parameters for obtaining Graph 5 are set as shown in Figure 29. In the parameters shown in Figure 29, the period start "2020 / 04", the period end "2021 / 03", and the aggregation mode "Sales" are set based on the extraction conditions described in "1", and the designated payee "Payee A" is set based on the anomaly determination result data 106m.

[0192] Then, based on the set parameters shown in FIG. 29, sales and purchase aggregated data 106j, which is the data from which Graph 5 is generated, is generated. However, the method of generation and the contents of the generated data are the same as those described in (2-6) with reference to FIG. 30, so a description thereof will be omitted.

[0193] 6. Next, five graphs are output based on the data generated in steps "2" to "5".

[0194] The data bind information used when binding data to graph 1 and the contents of the generated graph 1 are similar to those described in (2-7) “1” with reference to FIG. 31, and therefore will not be described here.

[0195] The data bind information used when binding data to graph 2 and the contents of the generated graph 2 are similar to those described in “2” of (2-7) with reference to FIG. 32, and therefore description thereof will be omitted.

[0196] The data bind information used when binding data to graph 3 and the generated graph 3 are shown in Fig. 43. The aggregation unit graph display section 102f generates and displays line graphs with the purchase amount in the purchase amount aggregation data 106h in Fig. 40 (i.e., "the aggregated purchase amount" in "3") on the vertical axis and the accounting year and month in the purchase amount aggregation data 106h in Fig. 40 on the horizontal axis for the number of departments.

[0197] The key point is that Graph 3 in Figure 33, explained in (2-7) “3”, is a line graph “by person in charge”, whereas Graph 3 in Figure 43, explained in this section, is a line graph “by department”.

[0198] The data binding information used when binding data to graph 4 and the generated graph 4 are shown in Fig. 44. The purchase accounting method-specific graph display unit 102g generates and displays as many bar graphs as the number of departments, with the purchase amount in the purchase method-specific aggregated data 106i in Fig. 42 (i.e., "the aggregated purchase amount" in "4") on the vertical axis.

[0199] The key point is that Graph 4 in Figure 34, explained in (2-7) “4”, is a bar graph showing “by person in charge”, whereas Graph 4 in Figure 44, explained in this section, is a bar graph showing “by department”.

[0200] The data bind information used when binding data to the graph 5 and the contents of the generated graph 5 are similar to those described in “5” of (2-7) with reference to FIG. 35, and therefore will not be described here.

[0201] 7. The generated graphs 1 to 5 are displayed in a list on the analysis screen, as shown in FIG.

[0202] 8. The method for setting the highlighting of graphs 1 and 4 is the same as that of “7” in (2-7), so a detailed explanation will be omitted. The setting of the coloring parameters for highlighting payment recipients for which an abnormality has been detected in graph 1 is shown in Figure 46.

[0203] 9. Here, we will explain the effect of looking at the "by department" graph. If a specific department has a high purchase amount, it is possible that fraud is occurring on a departmental level because multiple employees in that department have performed cancellation operations. The person in charge of checking can become aware of this possibility by looking at graphs 3 and 4.

[0204] Below, we will explain in detail how to discover fraud by department using figures that compare the graphs by person in charge and by department for Graph 3 and Graph 4. Note that Graphs 3 and 4 used in the following explanation are separate graphs that are not related to the specific examples given so far.

[0205] First, Figure 47 shows Graph 3 (graph by person in charge) when the purchase amount is aggregated by person in charge, and Graph 3 (graph by department) when the purchase amount is aggregated by department. Assume that fraud is occurring at the department level in Department B. In the graph by person in Figure 47, all of the graphs for Persons A to D in Department B show a similar trend of increasing purchase amounts in March 2021, so at first glance it appears that no fraudulent purchases are occurring. In contrast, in the graph by department in Figure 47, only the graph for Department B shows an unnatural increase in purchase amounts in March 2021. For this reason, by looking at the graph by department, the person in charge of checking can notice the possibility that, for example, Persons A to D in Department B are each recording a small amount of fraudulent purchase amounts so that the fraudulent purchases are less likely to be revealed.

[0206] Next, Figure 48 shows Graph 4 (graph by person in charge) when purchasing amounts are aggregated by person in charge, and Graph 4 (graph by department) when purchasing amounts are aggregated by department. Assume that fraud is occurring at the department level in department B. In the graphs by person in Figure 48, immediate purchases are recorded on average in all graphs for persons A to D in department B, and the proportion of immediate purchases for a specific person is not extremely high, so at first glance it appears that no purchasing fraud is occurring. In contrast, in the graphs by department in Figure 48, it can be seen that the proportion of immediate purchases is high only in the graph for department B. For this reason, the person in charge of checking can notice the possibility that persons A to D in department B are each recording a small amount of fraudulent purchasing amounts as immediate purchases so that the purchasing fraud is not easily revealed.

[0207] (3-2) Displaying the analysis graph when "department" is specified as the aggregation unit and "order" is specified as the aggregation target In this section (3-2), we will mainly explain an example of checking the sales amount generation status (i.e., order amount) at the time of order by using Graph 5. Note that the processing in this section (3-2) is assumed to be performed following the processing in (3-1).

[0208] 1. First, as shown in the example screen of FIG. 49, in the area for setting extraction conditions on the analysis screen, "Orders" is selected as the aggregation target. In other words, the aggregation target is changed from "Sales" to "Orders." However, as shown in the example screen of FIG. 49, the aggregation unit remains unchanged, remaining at "Department." Furthermore, as shown in the example screen of FIG. 49, the start of the period remains unchanged, remaining at "2020 / 04," and the end of the period remains unchanged, remaining at "2021 / 03."

[0209] 2. Based on the set extraction conditions, parameters for acquiring graphs 1 to 2 are set as shown in Figure 49. In the parameters shown in Figure 49, the period start "2020 / 04", the period end "2021 / 03", and the aggregation mode "department" are set based on the extraction conditions described in the previous paragraph.

[0210] Then, based on the set parameters shown in Figure 49, purchase difference amount calculation result data 106g, which is the data used to generate graphs 1 to 2, is generated. However, the method of generation and the contents of the generated data are the same as those described in (2-3) with reference to Figure 24, so description thereof will be omitted.

[0211] 3. Next, based on the extraction conditions set in "1", parameters for acquiring Graph 3 are set as shown in Fig. 39. In the parameters shown in Fig. 39, the start of the period "2020 / 04", the end of the period "2021 / 03", and the aggregation mode "department" are set based on the extraction conditions described in "1".

[0212] Then, based on the set parameters shown in Figure 39, purchase amount summary data 106h, which is the data from which Graph 3 is generated, is generated. However, the method of generation and the contents of the generated data are similar to those explained in "3" of (3-1) with reference to Figure 40, so explanation will be omitted.

[0213] 4. Next, based on the extraction conditions set in "1", parameters for acquiring Graph 4 are set as shown in Fig. 41. In the parameters shown in Fig. 41, the period start "2020 / 04", the period end "2021 / 03", and the aggregation mode "department" are set based on the extraction conditions described in "1", and the designated accounting year and month "2021 / 03" is set based on the anomaly determination result data 106m.

[0214] Then, based on the set parameters shown in Figure 41, the aggregated data by purchasing method 106i, which is the data used to generate Graph 4, is generated. However, the method of generation and the contents of the generated data are similar to those explained in "4" of (3-1) with reference to Figure 42, so explanation will be omitted.

[0215] 5. Next, based on the extraction conditions set in "1", parameters for obtaining Graph 5 are set as shown in Figure 50. In the parameters shown in Figure 50, the period start "2020 / 04", the period end "2021 / 03", and the aggregation mode "Order" are set based on the extraction conditions described in "1", and the designated payee "Payee A" is set based on the anomaly determination result data 106m.

[0216] Then, based on the set parameters shown in FIG. 50, the order / purchase-specific aggregated data 106k, which is the data from which the graph 5 is generated, is generated as follows.

[0217] That is, by referring to the purchase accounting data 106c in FIG. 51, purchase amounts are tallied for each combination of accounting year / month and payee in the range of 2020 / 04 to 2021 / 03. Note that this tallying is only performed for the payee specified in the parameters shown in FIG. 50 (in this example, "Payee A"). The data classification "Purchase", the accounting year / month, the payee, and the tallied purchase amount are stored in the order / purchase-specific tallied data 106k in FIG. 51.

[0218] Furthermore, because the aggregation mode specified in the parameters shown in Fig. 50 is "order," the order amount is aggregated for each accounting month and year in the range of 2020 / 04 to 2021 / 03, with reference to the order posting data 106f in Fig. 51. The data classification "order," the accounting month and year, and the aggregated order amount are stored in the order / purchase aggregated data 106k in Fig. 51.

[0219] In this manner, the order / purchase-specific aggregated data 106k in FIG. 51 is generated.

[0220] The key point is that in (2-6), the “sales amount” was the subject of the aggregation, whereas in “5” of this item (3-2), the “order amount” was the subject of the aggregation.

[0221] 6. Next, five graphs are output based on the data generated in steps "2" to "5".

[0222] The data bind information used when binding data to graph 1 and the contents of the generated graph 1 are similar to those described in (2-7) “1” with reference to FIG. 31, and therefore will not be described here.

[0223] The data bind information used when binding data to graph 2 and the contents of the generated graph 2 are similar to those described in “2” of (2-7) with reference to FIG. 32, and therefore description thereof will be omitted.

[0224] The data bind information used when binding data to the graph 3 and the contents of the generated graph 3 are similar to those explained in “6” of (3-1) with reference to FIG. 43, and therefore will not be explained here.

[0225] The data bind information used when binding data to the graph 4 and the contents of the generated graph 4 are similar to those explained in “6” of (3-1) with reference to FIG. 44, and therefore will not be explained here.

[0226] FIG. 52 shows data binding information used when binding data to graph 5 and graph 5 thus generated. The order / purchase comparison graph display unit 102i generates a line graph (line graph of "Purchase" in FIG. 52) for payee A, in which the amount in the order / purchase aggregated data 106k in FIG. 51 (i.e., "the aggregated purchase amount" in "5") is the vertical axis and the accounting year / month in the order / purchase aggregated data 106k in FIG. 51 is the horizontal axis. The order / purchase comparison graph display unit 102i also generates a line graph (line graph of "Order" in FIG. 52) in which the amount in the order / purchase aggregated data 106k in FIG. 51 (i.e., "the aggregated order amount" in "5") is the vertical axis and the accounting year / month in the order / purchase aggregated data 106k in FIG. 51 is the horizontal axis. The order / purchase comparison graph display unit 102i then displays both of the generated graphs together as graph 5.

[0227] Graph 5 in Figure 35 explained in "5" of (2-7) consists of a line graph of purchases and a line graph of "Sales," allowing you to compare the purchase amount and the "Sales amount," whereas Graph 5 in Figure 52 explained in this section consists of a line graph of purchases and a line graph of "Orders," allowing you to compare the purchase amount and the "Order amount."

[0228] 7. The generated graphs 1 to 5 are displayed in a list on the analysis screen, as shown in FIG.

[0229] 8. The method for setting up the highlighting of graphs 1 and 4 is the same as that in (2-7) “7”, so a detailed explanation will be omitted.

[0230] 9. Here, we will explain what effect looking at the "Orders" graph in Graph 5 has.

[0231] If sales occur in the same month as orders, the person in charge of checking should select "Sales" in the extraction conditions on the analysis screen. For example, if the purchase, order, and sales for a certain transaction are all recorded in March 2021, the person in charge of checking can discover purchase fraud by comparing the purchase amount graph and the sales amount graph as of March 2021, as shown in the dotted frame in the graph in Figure 54.

[0232] However, when sales are recorded across multiple months, it may not be possible to detect abnormalities in the purchase amount by comparing sales and purchases for a single month. In this case, the person in charge of checking can select "Orders" in the extraction conditions on the analysis screen to compare the order information before sales with the purchase information, and detect abnormalities in the purchase amount.

[0233] For example, if the purchases and orders for a certain transaction are recorded in March 2021, but the sales are recorded the following month in April 2021, there is no point in comparing the purchase amount graph and the sales amount graph at the same time.In contrast, as shown by the dotted frame within the graph in Figure 55 (not outside the graph), the purchase amount graph and the order amount graph can be compared at the same time of March 2021, allowing the person in charge of checking to discover any purchase fraud.

[0234] In addition, the person in charge of checking can select whether to look at the sales amount or the order amount as the comparison target for the purchase amount by specifying it in the extraction conditions section on the analysis screen.

[0235] [5. Summary of this embodiment] In this way, as mainly explained in [4-1], the fraudulent purchasing detection support device 100 of this embodiment can support fraudulent purchasing detection operations by automatically calculating the difference between the purchase amount during the confirmation period (a certain accounting month) and the purchase amount during the comparison period (the same month of the previous year), and detecting any of the calculated differences that are abnormally large.

[0236] In addition, according to the purchasing fraud detection business support device 100 of this embodiment, as mainly explained in [4-2], by referring to the five graphs displayed on the analysis screen, it is also possible to analyze the cause of the abnormality in the purchasing price difference amount.

[0237] Conventionally, it was possible to detect irregularities in purchasing transactions that occur periodically by having a person in charge manually check the purchasing records of the previous year as well. However, this method requires a lot of time and requires a lot of specialized knowledge to collect various data and perform calculations before a purchasing fraud is discovered, which creates problems in that it is accompanied by a high risk of operational mistakes and oversights.

[0238] Therefore, in this embodiment, for example, data registered due to purchase fraud can be automatically detected and notified within transaction data in sales operations. Specifically, anomalies can be detected by calculating the difference when comparing the purchase record for a single month with the purchase record for the same month of the previous year. In addition, a screen can be output that allows analysis of the timing when the amount increases from the purchase record for the same month of the previous year, the person in charge of recording the purchase, the recording method, etc.

[0239] In other words, in this embodiment, for example, purchasing data can be aggregated and purchasing data that is considered to be fraudulent can be classified, making it possible to visualize the fraudulent situation. In addition, in this embodiment, for example, the aggregation method and the alert method are devised. And, in this embodiment, for example, by making it possible to aggregate purchasing records by organization unit, it is possible to detect purchasing fraud by organization unit that cannot be detected by only looking at the purchasing records of individual personnel.

[0240] As a result, this embodiment has the following effects, for example. First, it is now possible to periodically and automatically detect purchasing fraud from a huge amount of purchasing information. In other words, even people without specialized knowledge can notice purchasing fraud. In addition, the system automatically processes content that requires data to be compiled and compared under various conditions (conditions such as by person in charge, by purchasing accounting method, and by month of last year's purchasing results), thereby avoiding the risk of operational errors. Furthermore, a screen can be output that analyzes and confirms the abnormality and its basis, making it possible to detect abnormalities with high reliability.

[0241] [6. Contribution to the United Nations-led Sustainable Development Goals (SDGs)] This embodiment can contribute to improving business efficiency and promoting appropriate management decisions by companies, thereby contributing to goals 8 and 9 of the SDGs.

[0242] Furthermore, this embodiment can contribute to reducing waste and promoting paperless and electronic systems, thereby contributing to the achievement of SDGs Goals 12, 13, and 15.

[0243] Furthermore, this embodiment can contribute to strengthening control and governance, making it possible to contribute to Goal 16 of the SDGs.

[0244] 7. Other embodiments The present invention may be embodied in various different embodiments other than those described above within the scope of the technical concept set forth in the claims.

[0245] For example, among the processes described in the embodiments, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically using known methods.

[0246] In addition, the processing procedures, control procedures, specific names, registered data for each process, information including parameters such as search conditions, screen examples, and database configurations shown in this specification and drawings may be changed as desired unless otherwise specified.

[0247] Moreover, with regard to the purchasing fraud detection business support device 100, the components shown in the figures are merely functional concepts, and the device does not necessarily have to be physically configured as shown in the figures.

[0248] For example, the processing functions of the purchasing fraud detection business support device 100, particularly the processing functions performed by the control unit, may be realized in whole or in part by a CPU and a program interpreted and executed by the CPU, or may be realized as hardware using wired logic. The program is recorded on a non-transient computer-readable recording medium containing programmed instructions for causing the information processing device to execute the processes described in this embodiment, and is mechanically read by the purchasing fraud detection business support device 100 as necessary. That is, a computer program for giving instructions to the CPU in cooperation with the OS and performing various processes is recorded in a storage unit such as a ROM or HDD (Hard Disk Drive). This computer program is executed by being loaded into a RAM, and cooperates with the CPU to form the control unit.

[0249] In addition, this computer program may be stored in an application program server connected to the purchasing fraud detection business support device 100 via any network, and it is also possible to download all or part of it as needed.

[0250] In addition, the program for executing the process described in this embodiment may be stored in a non-transient computer-readable recording medium, or may be configured as a program product. Here, the "recording medium" includes any "portable physical medium" such as a memory card, a Universal Serial Bus (USB) memory, a Secure Digital (SD) card, a flexible disk, a magneto-optical disk, a ROM, an Erasable Programmable Read Only Memory (EPROM), an Electrically Erasable and Programmable Read Only Memory (EEPROM (registered trademark)), a Compact Disk Read Only Memory (CD-ROM), a Magneto-Optical disk (MO), a Digital Versatile Disk (DVD), and a Blu-ray (registered trademark) Disc.

[0251] Moreover, a "program" is a data processing method written in any language or description method, and may be in any form, such as source code or binary code. Note that a "program" is not necessarily limited to a single configuration, but also includes a distributed configuration as multiple modules or libraries, and a program that works with a separate program, such as an OS, to achieve its function. Note that the specific configuration and reading procedure for reading a recording medium in each device shown in the embodiments, as well as the installation procedure after reading, may use well-known configurations and procedures.

[0252] The various databases etc. stored in the memory unit are storage means such as memory devices such as RAM and ROM, fixed disk devices such as hard disks, flexible disks, and optical disks, and store various programs, tables, databases, and web page files etc. used for various processes and providing websites.

[0253] The fraudulent purchasing detection business support device 100 may be configured as an information processing device such as a known personal computer or workstation, or may be configured as the information processing device to which any peripheral device is connected. The fraudulent purchasing detection business support device 100 may be realized by installing software (including programs or data, etc.) that causes the device to realize the processing described in this embodiment.

[0254] Furthermore, the specific form of distribution and integration of the devices is not limited to that shown in the drawings, and all or part of them can be functionally or physically distributed and integrated in any unit according to various additions or functional loads. In other words, the above-mentioned embodiments can be implemented in any combination, or the embodiments can be implemented selectively. [Industrial Applicability]

[0255] The present invention is useful, for example, in any industry or business type in which management of purchase records occurs. [Explanation of symbols]

[0256] 100 Purchasing fraud detection business support device 102 Control section 102a Purchase Difference Amount Calculation Department 102b Abnormal value detection unit 102c Abnormality display section 102d Graph display by customer 102e Graph display section for comparing two years 102f Graph display by aggregation unit 102g Graph display by purchase accounting method 102h Sales and purchase comparison graph display section 102i Order / Purchase Comparison Graph Display 104 Communication interface section 106 Storage section 106a Automatic detection execution schedule data 106b Acquisition range condition data 106c Purchase accounting data 106d Order entry data 106e Sales Record Data 106f Order entry data 106g Purchase difference amount calculation result data 106h Purchase amount summary data 106i Aggregated data by purchasing method 106j Sales and Purchase Aggregation Data 106k Order / Purchase Data 106m Abnormality Judgment Result Data 106n Abnormality judgment result message data 106p Abnormality judgment result message details data 108 Input / Output Interface Section 112 Input Devices 114 Output Device 200 Servers 300 Network

Claims

1. A purchasing fraud detection business support device that is equipped with a control unit and a storage unit and that can support a business of detecting fraud regarding purchasing records by calculating a purchasing difference amount, which is the difference between a purchasing amount during a period to be confirmed and a purchasing amount during a period to be compared, The storage unit includes: Purchase accounting data including purchase date, customer identification data, and purchase amount is stored, The control unit is a purchase difference amount calculation means for calculating the purchase difference amount for each combination of the confirmation period and the customer identification data by subtracting the purchase amount corresponding to the purchase date belonging to the comparison period, which is obtained by aggregating the purchase amount for each customer identification data, from the purchase amount corresponding to the purchase date belonging to the confirmation period, which is obtained by aggregating the purchase amount for each customer identification data; an abnormal value detection means for detecting, according to a predetermined statistical method, an abnormal value that exceeds an upper limit among the purchase difference amounts calculated by the purchase difference amount calculation means; an abnormality display means for displaying the purchase difference amount detected as an abnormal value by the abnormal value detection means and the combination of the confirmation target period and the customer identification data corresponding to the detected purchase difference amount; To have A purchasing fraud detection business support device characterized by the above.

2. The abnormality display means is displaying the predetermined statistical method and the upper limit value together; 2. The purchasing fraud detection business support device according to claim 1,

3. The predetermined statistical method is a method using an interquartile range, the upper limit is calculated by adding 1.5 times the interquartile range to the third quartile; 3. The purchasing fraud detection business support device according to claim 1 or 2,

4. The storage unit includes: The data storage device further stores a purchase difference amount calculation result data including an amount obtained by aggregating the purchase amount in the purchase appropriation data for each period and the customer identification data, the period, and the customer identification data; The control unit is a business partner graph display means for generating and displaying a line graph showing a trend of the aggregated amount for each period based on the purchase difference amount calculation result data, the line graph being equal to the number of business partner identification data; The line graph is: The aggregated amount in the purchase difference amount calculation result data is set as the vertical axis, The period in the purchase difference amount calculation result data is set as a horizontal axis; 4. The purchasing fraud detection business support device according to claim 1,

5. The storage unit includes: The data storage device further stores a purchase difference amount calculation result data including an amount obtained by aggregating the purchase amount in the purchase appropriation data for each period and the customer identification data, the period, and the customer identification data; The control unit is a line graph showing the trend of the aggregated amount for each period in a year to be confirmed for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase difference amount calculation result data, and a line graph showing the trend of the aggregated amount for each period in a year to be compared for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means, The confirmation target fiscal year is a fiscal year to which the confirmation target period corresponding to the purchase difference amount detected as an abnormal value by the abnormal value detection means belongs, The comparison year is the year immediately preceding the confirmation year, The line graph is: The aggregated amount in the purchase difference amount calculation result data is set as the vertical axis, The horizontal axis should show months without years.

5. The purchasing fraud detection business support device according to claim 1,

6. The purchase accounting data further includes at least one aggregation unit selected from among business establishment identification data, department identification data, and person in charge identification data; The storage unit includes: the purchase amount in the purchase recording data is further stored in the data storage unit, and purchase amount summary data including the period, the customer identification data, and the summary unit is stored in the data storage unit; The control unit is a graph display unit for displaying a line graph showing a change in the amount of the transaction for each period for the customer identification data corresponding to the difference in purchase amount detected by the abnormal value detection unit based on the purchase amount summary data, the line graph being generated for each of the number of the summary units; The line graph is: The aggregated amount in the purchase amount aggregate data is set as the vertical axis, The time period in the purchase amount summary data is plotted on the horizontal axis; 6. The purchasing fraud detection business support device according to claim 1,

7. The purchase accounting data further includes at least one of the business establishment identification data, department identification data, and person in charge identification data as a counting unit, and an order number for purchases made via an order by registering the order accounting data; The storage unit includes: The data further includes an amount obtained by aggregating the purchase amount in the purchase accounting data for each combination of the period, the customer identification data, the aggregation unit, and the presence or absence of the purchase order number, and an aggregated data by purchase method including the period, the customer identification data, the aggregation unit, an immediate purchase classification which is a classification when the purchase amount without the purchase order number is aggregated, and an order route classification which is a classification when the purchase amount with the purchase order number is aggregated, The control unit is a purchase accounting method-specific graph display means for generating and displaying bar graphs showing the aggregated amounts for the period corresponding to the purchase difference amount detected by the abnormal value detection means and the customer identification data corresponding to the purchase difference amount detected by the abnormal value detection means, the number of bar graphs being the same as the number of aggregation units, based on the purchase method-specific aggregated data; In the bar graph, The aggregated amount corresponding to the immediate purchase category and the aggregated amount corresponding to the order transit category are identifiable; 7. The purchasing fraud detection business support device according to claim 1,

8. The storage unit includes: Sales recording data including a sales date and a sales amount; a purchase summary record including an amount obtained by summarizing the purchase amount in the purchase appropriation data for each combination of a period and the customer identification data, the period in the purchase appropriation data, and the customer identification data in the purchase appropriation data; and sales and purchase summary data including a sales summary record including an amount obtained by summarizing the sales amount in the sales appropriation data for each period and the period in the sales appropriation data; is further stored, The control unit is a sales / purchase comparison graph display means for generating a line graph showing a trend of the aggregated amount for each period for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase aggregate record, generating a line graph showing the aggregated amount for each period based on the sales aggregate record, and displaying both graphs together; The line graph is: The aggregated amount in the record is set as the vertical axis, The time period in the record is plotted on the horizontal axis; 8. The purchasing fraud detection business support device according to claim 1,

9. The storage unit includes: Order entry data including an order date and an order amount; a purchase summary record including an amount obtained by summarizing the purchase amount in the purchase apportionment data for each combination of a period and the customer identification data, the period in the purchase apportionment data, and the customer identification data in the purchase apportionment data; and order / purchase summary data including an order summary record including an amount obtained by summarizing the order amount in the order apportionment data for each period and the period in the order apportionment data; is further stored, The control unit is a line graph showing the trend of the aggregated amount for each period for the supplier identification data corresponding to the purchase difference amount detected by the abnormal value detection means based on the purchase aggregate record, a line graph showing the aggregated amount for each period based on the order aggregate record, and a graph display means for comparing order and purchase that displays both graphs together; The line graph is: The aggregated amount in the record is set as the vertical axis, The time period in the record is plotted on the horizontal axis; 9. The purchasing fraud detection business support device according to claim 1,

10. The confirmation period is a certain month of a certain year, The comparison period is the certain month of the year preceding the certain year; 10. The purchasing fraud detection business support device according to claim 1,

11. A method for supporting the detection of purchase fraud, which is executed by an information processing device having a control unit and a storage unit, and which can support a task of detecting fraud relating to purchase records by calculating a purchase difference amount, which is the difference between a purchase amount during a period to be confirmed and a purchase amount during a period to be compared, comprising: The storage unit includes: Purchase accounting data including purchase date, customer identification data, and purchase amount is stored, Executed by the control unit, a purchase difference amount calculation step of calculating the purchase difference amount for each combination of the confirmation period and the customer identification data by subtracting the purchase amount corresponding to the purchase date belonging to the comparison period, which is calculated for each customer identification data, from the purchase amount corresponding to the purchase date belonging to the confirmation period, which is calculated for each customer identification data; an abnormal value detection step of detecting, according to a predetermined statistical method, an abnormal value that exceeds an upper limit among the purchase difference amounts calculated in the purchase difference amount calculation step; an abnormality display step of displaying the purchase difference amount detected as an abnormal value in the abnormal value detection step and a combination of the confirmation target period and the customer identification data corresponding to the detected purchase difference amount; containing, A purchasing fraud detection business support method, characterized by the above.

12. A purchasing fraud detection support program executed by an information processing device having a control unit and a storage unit, which can support a task of detecting fraud in purchasing records by calculating a purchasing difference amount, which is the difference between a purchasing amount during a period to be confirmed and a purchasing amount during a period to be compared, The storage unit includes: Purchase accounting data including purchase date, customer identification data, and purchase amount is stored, The control unit, a purchase difference amount calculation step of calculating the purchase difference amount for each combination of the confirmation period and the customer identification data by subtracting the purchase amount corresponding to the purchase date belonging to the comparison period, which is calculated for each customer identification data, from the purchase amount corresponding to the purchase date belonging to the confirmation period, which is calculated for each customer identification data; an abnormal value detection step of detecting, according to a predetermined statistical method, an abnormal value that exceeds an upper limit among the purchase difference amounts calculated in the purchase difference amount calculation step; an abnormality display step of displaying the purchase difference amount detected as an abnormal value in the abnormal value detection step and a combination of the confirmation target period and the customer identification data corresponding to the detected purchase difference amount; To carry out the A program to assist in the detection of purchasing fraud.

Images