Information processing device, program, and method for controlling information processing device

Abstract

An information processing device, a control method thereof, and a program therefor that prevent the risk of information leakage are provided. [Solution] In the overall system, the employee terminal 100 executes a predetermined process when the photography determination unit 104 determines that the data contains photography device image data, and when the router determination unit 106 determines that the SSID of the connected wireless router does not correspond to the SSID of an authorized router. The predetermined process includes a process of outputting a predetermined image signal, a process of restricting the output of the image signal, a process of notifying the administrator terminal, and a process of recording the employee terminal 100 log.

Description

[Technical field]

[0001] The present disclosure relates to a technique for reducing the risk of information leakage. [Background technology]

[0002] In recent years, the places where employees work tend to be ubiquitous, not only in the office, but also in shared offices, conference rooms, trains, hotels, cafes, etc. In addition, the number of companies encouraging teleworking has been increasing, and the opportunities for employees to work from home are also on the rise.

[0003] As employees' work locations become more ubiquitous, the risk of information leakage from image information (e-mails, confidential documents, drawings, etc.) displayed on information processing devices such as personal computers and mobile terminals used by employees increases.

[0004] As a technology to address such risks of information leakage, one has been disclosed that detects facial images to determine whether or not someone else is peeking, and if it is determined that someone else is peeking, performs anti-peeking processing (such as turning on a viewing angle control filter) (see, for example, Patent Document 1).

[0005] Furthermore, as a technology for addressing the risk of information leakage, Patent Document 2 discloses a technology in which image information and audio information captured by a camera equipped on an information terminal are transmitted to a server, and the server analyzes the image information and audio information to determine the degree of risk of information leakage (see, for example, Patent Document 2). [Prior art documents] [Patent documents]

[0006] [Patent Document 1] JP 2010-128778 A [Patent Document 2] JP 2019-117483 A Summary of the Invention [Problem to be solved by the invention]

[0007] However, while the technologies disclosed in these patent documents can reduce the risk of information leakage due to a third party peeking at image information displayed on an information processing device, they have the drawback of not being able to deal with anything other than peeking by a third party.

[0008] The present disclosure has been made in consideration of the above circumstances, and aims to provide a technology capable of reducing the risk of information leakage. [Means for solving the problem]

[0009] In order to achieve the above-mentioned objective, the information processing device disclosed herein is an information processing device that has a display unit that displays images in response to user operations and is capable of sending and receiving information via a network by connecting to a router, and is equipped with a determination means that determines whether a specified event has occurred, and a control means that executes a specified process when it is determined that the specified event has occurred, thereby preventing the risk of information leakage.

[0010] In the information processing device of the present disclosure, when the control means determines that the specified event has occurred, it prevents the risk of information leakage by executing a process of outputting a specified image signal or a process of restricting the output of an image signal.

[0011] In the information processing device of the present disclosure, when the control means determines that the predetermined event has occurred, the control means executes a process of notifying an administrator terminal, thereby preventing the risk of information leakage.

[0012] In the information processing device of the present disclosure, when the control means determines that the predetermined event has occurred, the control means executes a process of recording a log of the information processing terminal, thereby preventing the risk of information leakage.

[0013] In the information processing device disclosed herein, a photographing means is provided for photographing the user, and the specified event is that the photographed image includes an image of the photographing device, and the determination means determines whether or not the photographed image includes an image of the photographing device, and if it is determined that the photographed image includes the image of the photographing device, an image corresponding to the operation of the user is not displayed, thereby preventing the risk of information leakage due to an image displayed on the information processing device being photographed by the photographing device.

[0014] In the information processing device of the present disclosure, when the photographing image includes the photographing device image, the determination means determines whether the photographing device image is larger than the size set for each photographing device, and when it is determined that the photographing device image is larger than the size set for each photographing device, it determines that the photographing image includes the photographing device image.By this, since it is difficult to photograph an image displayed on the information processing device if the photographing device image is smaller than the set size, the risk of information leakage is reduced while preventing a decrease in the user's work efficiency.

[0015] In the information processing device of the present disclosure, when the photographed image includes the photographing device image, the determination means determines whether or not the trajectory of the photographing device image included in the photographed image photographed a predetermined number of times is within a set trajectory range, and when it is determined that the trajectory of the photographing device image is within the set trajectory range, it determines that the photographed image includes the photographing device image.By this, when the photographing device image is moving, there is no intention to capture an image to be displayed on the information processing device, so that the risk of information leakage is suppressed while preventing a decrease in the user's work efficiency.

[0016] In the information processing device of the present disclosure, when the control means determines that the specified event has occurred, it changes the first image to the second image and displays it, thereby preventing the risk of information leakage due to the image displayed on the information processing device being captured by an imaging device.

[0017] In the information processing device disclosed herein, the specified event is connection to a non-allowed router whose use is not permitted, and the determination means determines whether the router is an allowed router whose use is permitted, and the control means includes a process for outputting an image signal to the outside if it is determined that the router is an allowed router, and restricting the external output of the image signal if it is determined that the router is not an allowed router, thereby preventing the risk of information leakage due to the information processing device being connected to a non-allowed router.

[0018] In the information processing device disclosed herein, when the control means is in a state in which the external output of the image signal is restricted, and when a predetermined condition is satisfied, the control means lifts the restriction on the external output of the image signal, so that even if connected to a non-authorized router, for example, when an administrator or the like determines that there is no risk of information leakage, the restriction on the external output of the image signal can be lifted.

[0019] The program disclosed herein is a program to be executed on an information processing device that has a display unit that displays images in response to user operations and is capable of sending and receiving information via a network by connecting to a router, and functions as a determination means that determines whether a specified event has occurred and a control means that executes a specified process when it is determined that the specified event has occurred, thereby preventing the risk of information leakage in the information processing device.

[0020] The control method for an information processing device disclosed herein is a control method for an information processing device that has a display unit that displays images in response to user operations and is capable of sending and receiving information via a network by connecting to a router, and prevents the risk of information leakage in the information processing device by executing a determination step of determining whether a specified event has occurred and a control step of executing a specified process if it is determined that the specified event has occurred. Effect of the Invention

[0021] According to the present disclosure, it is possible to provide a technique capable of reducing the risk of information leakage. [Brief description of the drawings]

[0022] [Figure 1] 1 is a diagram illustrating an overall system configuration according to an embodiment of the present disclosure. [Diagram 2] 2 is a block diagram showing a hardware configuration applicable to the employee terminal 100, the VDI server 200, and the management server 300 shown in FIG. [Diagram 3] 2 is a block diagram showing the functional configuration of an employee terminal 100 and a management server 300 shown in FIG. [Figure 4] FIG. 13 is a diagram illustrating an example of shooting determination. [Diagram 5] FIG. 13 is a diagram illustrating an example of a router that is permitted to be used; [Figure 6] 13 is a flowchart showing an example of processing in an employee terminal 100, a VDI server 200, and a management server. [Figure 7] 13 is a flowchart showing an example of a router authentication process in the employee terminal 100. [Figure 8] 13 is a flowchart showing an example of a photographing detection process in the employee terminal 100. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0023] (Summary of the Disclosure) First, an overview of the present disclosure will be described.

[0024] The information leakage risk prevention technology disclosed herein is a technology in which a camera equipped in or connected to an information processing device such as a personal computer executes a predetermined process when it detects an image from a photographing device such as a camera or a mobile terminal with a camera owned by a third party as a predetermined event. The predetermined process includes a process of outputting a predetermined image signal or a process of restricting the output of an image signal, a process of notifying an administrator terminal, a process of recording a log of the information processing terminal, etc.

[0025] Furthermore, the information leakage risk prevention technology disclosed herein executes a predetermined process when a predetermined event occurs in which an information processing device is connected to a router other than a preregistered permitted router.

[0026] Hereinafter, modes for carrying out the present disclosure (hereinafter, referred to as embodiments of the present disclosure) will be described in detail with reference to the drawings.

[0027] (Overall system configuration) Next, an overall system configuration according to an embodiment of the present disclosure will be described. Fig. 1 is a diagram showing the overall system configuration according to an embodiment of the present disclosure. An overall system 10 according to an embodiment of the present disclosure is composed of a plurality of employee terminals 100, which are information processing devices, a VDI server 200, a management server 300, and a plurality of wireless routers A401 to EF404. One of the employee terminals 100 can be set as an administrator terminal.

[0028] Employee 1 terminal 100a, employee 2 terminal 100b, and employee 3 terminal 100c, which are employee terminals used by employees performing work within the company, are connected to wireless router A401 installed within the company, and are connected to the VDI server 200 and management server 300 via an in-company network (e.g., LAN).

[0029] In addition, employee 4 terminal 100d, which is an employee terminal used by an employee working outside the company 1 (for example, at home), is connected to a wireless router AB402 installed at the employee's home and is connected to the VDI server 200 and management server 300 via the Internet 500.

[0030] In addition, employee 5 terminal 100e, which is an employee terminal used by an employee holding a meeting outside the company 2 (for example, in another company's conference room), is connected to a wireless router CD403 installed within the other company, and is connected to the VDI server 200 and management server 300 via the Internet 500.

[0031] In addition, employee 6 terminal 100f, which is an employee terminal used by an employee working outside the company 3 (for example, a shared office), is connected to a wireless router EF404 installed in the shared office and is connected to the VDI server 200 and the management server 300 via the Internet 500.

[0032] The employee terminal 100 operates as a client that communicates with the VDI server 200 and the management server 300. The employee terminal 100 may be a notebook personal computer, a desktop personal computer, or a tablet computer. The employee terminal 100 may also be a thin client terminal.

[0033] The management server 300 has a function to authenticate whether the employee terminal 100 is legitimate, and a function to transmit information such as various data and various programs to the employee terminal 100 as necessary. The management server 300 also has a function to manage work hours based on the operating hours of each employee's employee terminal 100, a function to transmit update information to the employee terminal 100, and a function to generate a one-time password and transmit it to the employee terminal 100. The management server 300 may also notify the manager's terminal when the user of the employee terminal 100 is an unspecified user or when the management server 300 receives imaging device identification information of an image being captured by an imaging device.

[0034] The VDI server 200 functions as a server configured to provide a virtual desktop environment to the employee terminal 100 using a virtual desktop infrastructure (VDI). Note that, although there are several known technologies for achieving desktop virtualization to provide a virtual desktop environment, in the embodiment of the present disclosure, a description will be given using VDI.

[0035] In order to provide a virtual desktop environment, the VDI server 200 receives various operation information on the employee terminal 100 and transmits image information to be displayed on the screen of the employee terminal 100 and image information corresponding to updated parts of the screen. On the employee terminal 100, a screen corresponding to this image information is displayed, so that the virtual desktop environment executed on the VDI server 200 can be used in the same way as a desktop environment operating on the employee terminal 100. The status of work using the virtual desktop environment may be recorded. In particular, a log of the employee terminal 100 may be stored after a specific event is detected.

[0036] In the overall system configuration according to the embodiment of the present disclosure, the VDI server 200 is not a required component. If the VDI server 200 is not used, a remote desktop environment may be used by remotely connecting an employee terminal 100 outside the company to a terminal within the company (for example, an employee terminal 100 used for work within the company).

[0037] (Hardware configuration applicable to employee terminal 100, VDI server 200, and management server 300) Next, a description will be given of a hardware configuration applicable to the employee terminal 100, the VDI server 200, and the management server 300. Fig. 2 is a block diagram showing a hardware configuration applicable to the employee terminal 100, the VDI server 200, and the management server 300 shown in Fig. 1.

[0038] The CPU 701 performs overall control of each device connected to the system bus 720. In addition, the ROM 702 and the storage device 704 store a basic input / output system (BIOS) and an operating system (OS), which are control programs for the CPU 701. In the ROM 702 and the storage device 704, in the case of the employee terminal 100, various programs required to function as the employee terminal 100 are stored, in the case of the VDI server 200, various programs required to function as the VDI server 200 are stored, and in the case of the management server 300, various programs required to function as the management server 300 are stored. In the case of the employee terminal 100, a log of the employee terminal 100 after a predetermined event is detected is stored in the storage device 704.

[0039] The RAM 703 functions as a main memory, a work area, etc. for the CPU 701. The CPU 701 loads programs and the like required for executing various processes from the ROM 702 or the storage device 704 into the RAM 703, and executes the loaded programs and the like to realize various operations.

[0040] A communication I / F (communication interface) 705 communicates with external devices via a network (LAN or the Internet), and executes communication control processing on the network (for example, communication using TCP / IP, etc.).

[0041] Camera (imaging means) 706 is provided, for example, above a surface on which display (display unit) 711 is provided, and captures an image of the operator looking at display 711. Camera 706 is also equipped with a wide-angle lens, and can also capture images of the operator and the operator's surroundings. Camera 706 may be provided in any position that allows it to capture images of the operator and the operator's surroundings.

[0042] The speaker 707 outputs various sounds, and the microphone 708 inputs the operator's voice and surrounding sounds. The input device 709 is a keyboard, a mouse, or the like.

[0043] The graphic board 710 outputs a video signal, and is connected to a display 711. The graphic board 710 also has a video output I / F (video output interface) 712 such as an HDMI (registered trademark) terminal or an analog RGB output terminal, and outputs a video signal to a video device (display, projector, etc.) connected to the video output I / F 712.

[0044] (Functional configuration of employee terminal 100 and management server 300) Next, a description will be given of the functional configuration of the employee terminal 100 and the management server 300. Fig. 3 is a block diagram showing the functional configuration of the employee terminal 100 and the management server 300 shown in Fig. 1.

[0045] The image input unit (imaging means) 101 transmits image data captured by the camera 706 to the user authentication unit 102 and the photography determination unit 104. Note that the image input unit is set to transmit, for example, 10 pieces of image data per second, so the frame rate is 10 fps.

[0046] The user face image data storage unit 103 stores user face image data consisting of face image data and feature amount data indicating characteristics of the face image data, etc., associated with the user ID (user identifier) ​​of each user (employee) who is authorized to use the employee terminal 100.

[0047] The user determination unit (determination means) 102 identifies face image data included in the image data received from the image input unit 101. Then, it collates the identified face image data with the user face image data stored in the user face image data storage unit 103, and determines whether or not there is data in the user face image data whose degree of agreement is a predetermined level (for example, 80%) or more. Then, if it is determined that there is data in the user face image data whose degree of agreement is a predetermined level or more, it determines that the face image data included in the image data received from the image input unit 101 is face image data of a user who is permitted to use the employee terminal 100, and transmits user identification information including a user ID associated with this user face image data to the leak prevention control unit 109. The user determination unit 102 transmits user determination result information to the leak prevention control unit 109 at any time, that is, about 10 times per second since the frame rate of the image input unit 101 is 10 fps. Note that, if the user determination unit 102 cannot identify face image data from the image data received from the image input unit 101, it transmits user non-identification information indicating that the face image data cannot be identified to the leak prevention control unit 109. The user determination unit 102 may be an AI model based on AI (artificial intelligence) that utilizes machine learning, etc. In this case, for example, the AI ​​model of the user determination unit 102 may be updated by the AI ​​model transmitted from the management server 300 to the employee terminal 100.

[0048] The photographing determination image data storage unit 105 stores a plurality of photographing device image data consisting of a plurality of camera image data corresponding to the respective shapes of a plurality of cameras which are photographing devices, a plurality of camera-equipped mobile terminal image data corresponding to the respective shapes of a plurality of camera-equipped mobile terminals, etc. Note that the photographing device image data stored in the photographing determination image data storage unit 105 is simple image data such as contour image data showing the contour characteristics of the camera or camera-equipped mobile terminal in order to prioritize the detection speed by the photographing determination unit 104.

[0049] The photography determination unit (determination means) 104 reads the photography device determination image data stored in the photography determination image data storage unit 105, and determines whether or not there is an image that matches the photography device determination image data in the image data received from the image input unit 101. Then, when it is determined that there is data whose degree of match with the photography device determination image data is a predetermined level (for example, 60%) or more, it is determined that the image data received from the image input unit 101 includes photography device image data.

[0050] Furthermore, when the photographing determination unit 104 determines that the photographing device image data is included, it determines whether or not the next and subsequent image data received from the image input unit 101 contains an image that matches the same photographing device determination image data as the previous image. The photographing determination unit 104 executes such a determination a predetermined number of times (for example, a total of three times) to determine whether or not the same photographing device image data exists in each image data. Furthermore, when the same photographing device image data exists in each image data, it determines whether or not the trajectory of this photographing device image data is within a set range. Then, when it is determined that the same photographing device image data exists in each image data and that the trajectory of this photographing device image data is within a set range (for example, an area 1.2 times the size of the photographing device image data), it determines that there is a possibility that the screen of the employee terminal 100 will be photographed by the photographing device. When it is determined that there is a possibility that the screen of the employee terminal 100 will be photographed by the photographing device, it transmits photographing device identification information to the leak prevention control unit 109. Note that, when the trajectory of the photographing device image data exceeds the set range, it is determined that the photographing device is moving and therefore there is no intention to photograph the screen of the employee terminal 100 by the photographing device.

[0051] When the photography determination unit 104 determines that the image data received from the image input unit 101 does not contain an image that matches the photography device determination image data (the photography device image data does not exist) after the photography device identification information is transmitted, the photography determination unit 104 transmits photography device non-identification information to the leakage prevention control unit 109. Note that, when the size of the photography device image data included in the image data received from the image input unit 101 is smaller than the size (set number of pixels) set for each photography device, the photography determination unit 104 does not determine that the photography device image data is included because the distance makes it difficult to photograph the screen of the employee terminal 100. Note that the photography determination unit 104 may be an AI model based on AI (artificial intelligence) utilizing machine learning or the like. In this case, for example, the AI ​​model of the photography determination unit 104 may be updated by the AI ​​model transmitted from the management server 300 to the employee terminal 100.

[0052] The permitted router data storage unit 107 stores, as permitted router data, the SSIDs (service set identifiers) of wireless routers (permitted routers) to which the employee terminal 100 is permitted to connect.

[0053] The router determination unit (determination means) 106 determines whether the SSID of the wireless router to which the employee terminal 100 is connected corresponds to the SSID of the permitted router stored in the permitted router data storage unit 107. If it is determined that the SSID of the wireless router to which the employee terminal 100 is connected corresponds to the SSID of the permitted router, it transmits permitted router connection information including the SSID of the permitted router and the user ID to the leakage prevention control unit 109. If it is determined that the SSID of the wireless router to which the employee terminal 100 is connected does not correspond to the SSID of the permitted router, it transmits non-permitted router connection information including the SSID of the non-permitted router and the user ID to the leakage prevention control unit 109.

[0054] When the leak prevention control unit (control means) 109 receives user non-identifying information from the user determination unit 102 as a predetermined event, and when the leak prevention control unit (control means) 109 receives photographing device identifying information from the photographing determination unit 104, it executes predetermined processes such as a process of outputting a predetermined image signal or a process of limiting the output of an image signal, a process of notifying an administrator terminal, and a process of recording a log of an information processing terminal. As a process of outputting a predetermined image signal, the leak prevention control unit 109 changes the image signal to the display 711 from a current image signal (first image) to a screen saver image signal (second image) and outputs it. Note that the image signal may be changed to a signal other than the screen saver image signal and output. Also, a pop-up image may be output. The leak prevention control unit 109 may notify the administrator terminal in the background when a predetermined event occurs. At this time, the leak prevention control unit 109 may notify the administrator terminal without changing the information on the screen. Moreover, when the photographing device identification information is received, the photographing detection information including the user ID is transmitted to the operating time management unit 301 .

[0055] Furthermore, when the leakage prevention control unit 109 receives permitted router connection information or non-permitted router connection information from the router determination unit 106, it transmits operation information to the operation time management unit 301. Then, it stores the SSID included in the permitted router connection information or non-permitted router connection information as destination router information. Note that, when the SSID included in the newly received permitted router connection information or non-permitted router connection information is different from the SSID of the stored destination router information, it stores the SSID included in the newly received permitted router connection information or non-permitted router connection information as new destination router information.

[0056] Furthermore, when the leakage prevention control unit 109 receives unusable router connection information from the router determination unit 106, it disables (stops output of video signals) the video output I / F (external output) 712 in the video output unit 108. When the one-time password transmitted from the password input unit 110 after disabling the video output I / F 712 in the video output unit 108 matches the one-time password received from the password generation unit 309 described below, the leakage prevention control unit 109 enables (allows output of video signals) the video output I / F 712 in the video output unit 108. When the leakage prevention control unit 109 receives unavailable router connection information from the router determination unit 106, it may output a different image signal so as to change the image signal to the display 711 from the current image signal to a screen saver image signal. It may also output a pop-up image. It may also notify the administrator terminal via the management server 300. Furthermore, it may be possible to record a log of the target employee terminal 100 so that it can be analyzed later.

[0057] The operating time management unit 301 manages the operating time of the employee terminal 100 based on the operating information, shooting detection information, release information, etc. received from the leak prevention control unit 109. When the operation of the employee terminal 100 is terminated, the operating time management unit 301 stores the operating time of the employee terminal 100 in the operating time storage unit 302.

[0058] The user face image data update unit 303 determines whether the user face image data registered in the user face image data registration unit 304 has been updated, and if it determines that the user face image data has been updated, transmits the updated user face image data (new user face image data) to the leakage prevention control unit 109. When the leakage prevention control unit 109 receives new user face image data from the user face image data update unit 303, it updates the user face image data stored in the user face image data storage unit 103 to the new user face image data.

[0059] The photographing determination data update unit 305 determines whether the photographing device determination image data registered in the photographing determination image data registration unit 306 has been updated, and when it is determined that the photographing device determination image data has been updated, transmits the updated photographing device determination image data (new photographing device determination image data) to the leakage prevention control unit 109. When the leakage prevention control unit 109 receives the new photographing device determination image data from the photographing determination data update unit 305, it updates the photographing device determination image data stored in the photographing determination image data storage unit 105 to the new photographing device determination image data.

[0060] The allowed router update unit 307 judges whether the allowed router data registered in the allowed router registration unit 308 has been updated, and if it judges that the allowed router data has been updated, transmits the updated allowed router data (new allowed router data) to the leakage prevention control unit 109. Upon receiving the new allowed router data from the allowed router update unit 307, the leakage prevention control unit 109 updates the allowed router data stored in the allowed router data storage unit 107 to the new allowed router data.

[0061] When the password generation unit 309 receives a request to generate a one-time password from an external terminal (e.g., employee terminal 100 used by a manager (superior), etc.), it generates a one-time password and transmits the generated one-time password to the leakage prevention control unit 109 and the external terminal. The leakage prevention control unit 109 determines whether the one-time password received from the password generation unit 309 matches the one-time password received from the password input unit 110 (e.g., a one-time password transmitted by a manager, etc. and entered by a user). If the one-time passwords match, the leakage prevention control unit 109 stores the SSID of the unavailable router as the SSID of a router permitted for temporary use (temporary use permitted router).

[0062] (Example of shooting judgment) Next, an example of the shooting judgment will be described with reference to Fig. 4.

[0063] FIG. 4(a) shows an example in which it is determined that the screen of the employee terminal 100 may be captured by the photographing device. As shown in this figure, when it is determined that the camera-equipped mobile terminal image G01 (or the camera image G02) around the user image is equal to or larger than the size set for each photographing device and the trajectory of the camera-equipped mobile terminal image G01 (or the camera image G02) is within the set range, it is determined that the screen of the employee terminal 100 may be captured by the photographing device. Then, when it is determined that the screen of the employee terminal 100 may be captured by the photographing device, a screen saver image is displayed. Instead of changing the display from the first image to the second image as in the screen saver image, another image may be displayed superimposed on the current image as in a pop-up image. Image (video) output may be blocked. Also, it may be notified to the manager's terminal or a log of the employee terminal 100 in question may be recorded. Also, for example, when a predetermined release process or the like is performed, it is returned to the normal state.

[0064] 4(b) shows an example in which it is determined that there is no possibility that the screen of the employee terminal 100 will be captured by the photographing device. As shown in this figure, if it is determined that the camera-equipped mobile terminal image G01 (or camera image G02) around the user image is equal to or smaller than the size set for each photographing device, or if it is determined that the trajectory of the camera-equipped mobile terminal image G01 (or camera image G02) exceeds the set range even if the size of the camera-equipped mobile terminal image G01 (or camera image G02) is equal to or larger than the size set for each photographing device, it is determined that there is no possibility that the screen of the employee terminal 100 will be captured by the photographing device.

[0065] (Example of determining permitted routers) Next, an example of a router permitted to be used will be described with reference to Fig. 5, which is a diagram showing an example of a router permitted to be used.

[0066] 5(a) shows an example of a case where a wireless router registered in the permitted router data is connected. As shown in this figure, when it is determined that the wireless router connected to the employee terminal 100 is the wireless router A401 registered in the permitted router data, the video output to the outside is enabled (ON).

[0067] FIG. 5(b) shows an example of a case where a wireless router not registered in the permitted router data is connected. As shown in this figure, when the wireless router connected to the employee terminal 100 is the wireless router AB402 not registered in the permitted router data, the video output to the outside is disabled (OFF). When the video output to the outside is disabled (OFF), a one-time word is input, and when the input one-time password is authenticated, the video output to the outside is enabled. Instead of restricting the video output in this way, a different image may be displayed instead of the current image, or a different image may be displayed superimposed on the current image. Also, the administrator terminal may be notified, or a log of the employee terminal 100 in question may be recorded. In this case, the display of the different image may be terminated by inputting the one-time password.

[0068] (Example of processing in employee terminal 100, VDI server 200, and management server) Next, an example of the processing in the employee terminal 100, the VDI server 200, and the management server will be described. Fig. 6 is a flowchart showing an example of the processing in the employee terminal 100, the VDI server 200, and the management server.

[0069] First, the employee terminal 100 executes a login process (S101). In this login process, a user is photographed, and facial image data identified from the photographed image data is compared with the user's facial image data to perform facial image authentication of the user.

[0070] Next, it is determined whether or not the face image of the user has been authenticated in the login process (S102). If it is determined that the face image of the user has been authenticated, the process proceeds to S103. On the other hand, if it is determined that the face image of the user has not been authenticated, the process proceeds to S101.

[0071] If it is determined in S102 that the face image of the user has been authenticated, the employee terminal 100 is connected to the wireless router in S103 (router connection at login).

[0072] Next, the employee terminal 100 is connected to the VDI server 200, and user authentication (authentication of the user) is executed in the VDI server 200. If the user is authenticated, the VDI server 200 selects a virtual desktop environment for the authenticated user and transmits screen data corresponding to this virtual desktop environment to the employee terminal 100. Thereafter, input data entered by the input device 709 of the employee terminal 100 is transmitted to the VDI server 200, and the VDI server 200, having received this input data, transmits screen data corresponding to the input data. The screen data transmitted from the VDI server 200 is updated and displayed on the employee terminal 100.

[0073] Furthermore, by connecting the employee terminal 100 to the management server 300, the management server 300 starts measuring the operating time of the employee terminal 100. If there is update data (updated user face image data, updated image data for photographing device determination, updated permitted router data), the management server 300 transmits the update data to the employee terminal 100. When the employee terminal 100 receives the update data, it executes the update process for the corresponding data.

[0074] Next, the SSID of the wireless router to be connected is confirmed (S104).

[0075] Next, the employee terminal 100 judges whether the connected wireless router is a new wireless router. Also, it judges whether a one-time password (OTP) has been received from the management server 300 (S105). Here, it judges whether the wireless router is a new wireless router by judging whether the SSID is the same as the SSID of the connection destination router information stored in the leakage prevention control unit 109. If the connection destination router information is not stored in the leakage prevention control unit 109, it is judged to be a new wireless router. If it is judged that the connected wireless router is a new wireless router or that a one-time password has been received from the management server 300, the process proceeds to S106. On the other hand, if it is judged that the connected wireless router is not a new wireless router or that a one-time password has not been received from the management server 300, the process proceeds to S107.

[0076] If it is determined in S105 that the connected wireless router is a new wireless router or that a one-time password has been received from the management server 300, a router determination process is executed (S106).

[0077] Here, the router determination process will be described.

[0078] In the router determination process, first, it is determined whether or not the wireless router is permitted to be used (S1061). If it is determined that the wireless router is permitted to be used, the process proceeds to S1062. On the other hand, if it is determined that the wireless router is not permitted to be used, the process proceeds to S1063.

[0079] If it is determined in S1061 that the wireless router is permitted to be used, the connection destination router information is stored (S1062).

[0080] If it is determined in S1061 that the wireless router is not one permitted for use (a router not permitted for use), the video output is disabled (turned off) (S1063).

[0081] Next, the connection destination router information is stored (S1064).

[0082] Next, it is determined whether or not a one-time password has been input (S1065). If it is determined that a one-time password has been input, the process proceeds to S1066. On the other hand, if it is determined that a one-time password has not been input, the router determination process ends.

[0083] If it is determined in S1055 that a one-time password has been input, the one-time password is authenticated (S1066). Here, after it is determined in S1051 that the wireless router is not permitted to be used, if the one-time password sent from management server 300 has been received (see FIG. 6) and the one-time password has been input by the user, the one-time password received from management server 300 and the one-time password input by the user are authenticated.

[0084] Next, it is determined whether the one-time password has been authenticated (S1067). If it is determined that the one-time password has been authenticated, the process proceeds to S1068. On the other hand, if it is determined that the one-time password has not been authenticated, an authentication error is displayed and the router determination process is terminated.

[0085] After storing the destination router information in S1062, or if it is determined in S1067 that the one-time password has been authenticated, the video output is enabled (ON) (S1068) and the router determination process is then terminated. In FIG. 7, an example has been described in which the leakage prevention control unit 109 restricts the output of an image signal when the router is not an authorized router and releases the restriction with a password, but it may also be configured to output a specified image signal and release the restriction with a password when a specified event occurs. Also, the leakage prevention control unit 109 may notify the administrator terminal when the router is not an authorized router and record a log of the employee terminal 100 in question.

[0086] Returning to FIG. 6, when the router determination process is completed in S106, the photographing determination process is subsequently executed (S107).

[0087] 8 is a flowchart showing an example of the photography detection process in the employee terminal 100.

[0088] In the photography determination process, first, the photographed image data is confirmed (S1071).

[0089] Next, it is determined whether the photographic image data includes the photographic device image data (S1072). If it is determined that the photographic image data includes the photographic device image data, the process proceeds to S1073. On the other hand, if it is determined that the photographic image data does not include the photographic device image data, the process proceeds to S1081.

[0090] If it is determined in S1072 that the photographic image data includes the photographic device image data, it is determined whether or not the size (number of pixels) of the image (photographing device image data) is equal to or larger than the size (set size) set for each photographing device (S1073). If it is determined that the size of the photographing device image data is equal to or larger than the size set for each photographing device, the process proceeds to S1074. On the other hand, if it is determined that the size of the photographing device image data is not equal to or larger than the size set for each photographing device, the process proceeds to S1081.

[0091] If it is determined in S1073 that the size of the photographing device image data is equal to or larger than the size set for each photographing device, it is determined whether or not the value of a photographing determination counter DC (hereinafter referred to as DC) is 0 (S1074). If it is determined that the value of DC is 0, the process proceeds to S1075. On the other hand, if it is determined that the value of DC is not 0, the process proceeds to S1076.

[0092] If it is determined in S1074 that the value of DC is 0, a trajectory range is set (S1075). Here, taking into consideration camera shake by the photographer, for example, an area 1.2 times the size of the photographing device image data is set as the trajectory range.

[0093] Next, it is determined whether the image (photographing device image data) is within the set trajectory range (set trajectory range) (S1076). Note that, when the value of DC is 0, it is naturally determined that the photographing device image data is within the set trajectory range. When it is determined that the photographing device image data is within the set trajectory range, the process proceeds to S1077. On the other hand, when it is determined that the photographing device image data is beyond the set trajectory range, the process proceeds to S1081.

[0094] If it is determined in S1076 that the photographing apparatus image data is within the set locus range, the value of DC is incremented by 1 (S1077).

[0095] Next, it is determined whether the value of DC is 3 or not (S1078). If it is determined that the value of DC is 3 or more, the process proceeds to S1079. On the other hand, if it is determined that the value of DC is not 3 or more (is 1 or 2), the process proceeds to S1072.

[0096] If it is determined in S1078 that the value of DC is 3 or more, a predetermined image signal is output and a screen saver image is displayed (S1079).

[0097] Next, the photography detection information is sent to the management server 300 (S1080). Once the photography detection information is sent to the management server 300, the photography determination process is terminated. When the management server 300 receives the photography detection information described above, it suspends the measurement of the operating time. Then, when a predetermined release process or the like is performed, it resumes the measurement of the suspended operating time (see FIG. 6). By sending the photography detection information to the server 300, it is possible to notify the manager terminal that a predetermined event, namely leakage, has occurred. In addition, at the same time as sending the photography detection information to the management server 300, the log of the target employee terminal 100 may be stored in the storage device 704.

[0098] If it is determined in S1072 that the photographic image data does not include photographing device image data, if it is determined in S1073 that the size of the photographing device image data is not equal to or larger than the size set for each photographing device, or if it is determined in S1076 that the photographing device image data exceeds the set trajectory range, it is determined whether the value of DC is 1 or greater (S1081). If it is determined that the value of DC is 1 or greater, the process proceeds to S1082. On the other hand, if it is determined that the value of DC is not 1 or greater (is 0), the photographing determination process ends.

[0099] If it is determined in S1081 that the value of DC is 1 or more, the value of DC is set to 0 (reset). Also, the setting of the trajectory range is cleared (S1082). When the value of DC is set to 0 and the setting of the trajectory range is cleared, the shooting determination process ends.

[0100] 6, when the shooting determination process ends in S107, it is then determined whether or not to log out (S108). If it is determined to log out, the process proceeds to S109. On the other hand, if it is determined not to log out, the process proceeds to S104.

[0101] If it is determined in S108 that the user should log out, the logout process is executed (S109). When the logout process is executed, logout information is sent from the employee terminal 100 to the VDI server 200. The VDI server 200, which has received the logout information, cancels the selection of the virtual desktop environment of the user of the employee terminal 100.

[0102] Furthermore, when the logout process is executed, logout information is also sent from the employee terminal 100 to the management server 300. Upon receiving the logout information, the management server 300 ends the measurement of the operating time of this employee terminal 100.

[0103] When the logout process is completed in S109, the process on the employee terminal 100 ends.

[0104] The above describes an embodiment of the present disclosure, but the information acquisition device according to the present disclosure is not limited to the above-described embodiment, and various modifications and variations are possible within the scope of the gist of the present disclosure described in the claims.

[0105] In the embodiment of the present disclosure, when the leak prevention control unit 109 receives user non-identifying information from the user determination unit 102 and when the leak prevention control unit 109 receives photographing device identifying information from the photographing determination unit 104, the image signal to the display 711 is changed from the current image signal to a screen saver image signal and output. However, the present invention is not limited to this, and the image signal may be changed to an image signal other than the screen saver image signal and output. Also, another image signal such as a pop-up image may be displayed on the display 711 in a superimposed manner. Also, the output of the image signal may be stopped. Also, the video output I / F 712 in the video output unit 108 may be disabled. When the leak prevention control unit 109 receives user non-identifying information from the user determination unit 102 and when the leak prevention control unit 109 receives photographing device identifying information from the photographing determination unit 104, the leak prevention control unit 109 may notify the manager terminal via the server 300. Also, the log of the target employee terminal 100 may be recorded so that it can be analyzed later.

[0106] In the embodiment of the present disclosure, when the leakage prevention control unit 109 receives the unavailable router connection information from the router determination unit 106, the leakage prevention control unit 109 disables the video output I / F 712 in the video output unit 108. However, the present invention is not limited to this, and a different image signal may be output so as to change the image signal to the display 711 from the current image signal to a screen saver image signal. When the leakage prevention control unit 109 receives the unavailable router connection information from the router determination unit 106, the leakage prevention control unit 109 may notify the administrator terminal via the management server 300. Also, a different image signal such as a pop-up image may be displayed by superimposing it. Also, a log of the target employee terminal 100 may be recorded so that it can be analyzed later.

[0107] Furthermore, in the embodiment of the present disclosure, the management server 300 is provided with a password generation unit 309, and when a request to generate a one-time password is received from an external terminal, the management server 300 generates a one-time password and transmits the generated one-time password to the leakage prevention control unit 109. However, this is not limiting, and the management server 300 may not be provided with the password generation unit 309. In this case, it is possible to transmit a one-time password generated at an external terminal (or created by an administrator) to the employee terminal 100. Alternatively, a process may be performed from the administrator terminal to the administrator server 300 to lift restrictions on the external output of image signals.

[0108] In addition, in the embodiment of the present disclosure, the connection form of the employee terminal 100, the VDI server 200, and the management server 300 is a wireless connection or a wired connection, but the connection form may be a wireless connection or a wired connection.

[0109] In the embodiment of the present disclosure, the connection destination is specified from the SSID of the wireless router. However, the present invention is not limited to this, and the connection destination may be specified from a host name or a device identifier (e.g., a MAC address or a BD address). In addition, it may be determined whether or not to permit a connection destination based on a combination of a unique code (e.g., a password) and an identifier.

[0110] Furthermore, in the embodiment of the present disclosure, when it is determined that the DC value is 3 or more, it is detected that the image was captured by an image capturing device (see S1078). However, this is not limiting, and the DC value may be a value of 3 or more. The DC value may also be made variable. Furthermore, the frame rate of the image data used for image capture determination may also be made variable. [Explanation of symbols]

[0111] 10 Overall System 100 (100a-100f) Employee terminals (Employee terminal 1-Employee terminal 6) 200 VDI servers 300 Management Server 401~404 Wireless Router A~Wireless Router EF 500 Internet 701 CPU 702 ROM 703 RAM 704 Storage device 705 Communication I / F 706 Camera 707 Speaker 708 Mike 709 Input Device 710 Graphics Board 711 Display 712 Video output I / F

Claims

1. An information processing device that is equipped with a display unit that displays an image according to an operation by a user and an external output that can output an image signal to an external device, and that can transmit and receive information via a network by connecting to a router, A determination means for determining whether or not a predetermined event has occurred; a control means for executing a predetermined process when the determination means determines that the predetermined event has occurred; The predetermined event includes being connected to a non-permitted router that is not permitted to be used; the predetermined processing includes a processing for outputting a predetermined image signal from the external output or a processing for restricting output of the image signal from the external output, The determining means determines whether or not the connected router is an allowed router that is permitted to be used; When the determination means determines that the router is not the allowable router, the control means executes a process of outputting the predetermined image signal from the external output or a process of restricting output of the image signal from the external output until a predetermined condition is satisfied.

23. An information processing apparatus comprising:

2. When the predetermined condition is satisfied in a state in which the predetermined image signal is being output from the external output or the output of the image signal from the external output is being restricted, the control means stops the output of the predetermined image signal from the external output or releases the restriction on the output of the image signal from the external output.

2. The information processing apparatus according to claim 1,

3. The predetermined condition is that a one-time password is input and the one-time password is authenticated.

3. The information processing apparatus according to claim 1, wherein the information processing apparatus is a computer.

4. The predetermined process includes a process of notifying an administrator terminal, The control means executes a process of notifying the administrator terminal when the determination means determines that the router is not the allowable router.

4. The information processing apparatus according to claim 1, wherein the information processing apparatus is a computer.

5. The predetermined processing includes a process of recording a log of the information processing device, The control means executes a process of recording a log of the information processing device when the determination means determines that the information processing device is not an allowable router.

5. The information processing device according to claim 1, wherein the information processing device is a computer.

6. A program to be executed by an information processing device that has a display unit that displays an image in response to a user's operation and an external output that can output an image signal to the outside, and that can transmit and receive information via a network by connecting to a router, A determination means for determining whether or not a predetermined event has occurred; When the determination means determines that the predetermined event has occurred, the control means functions as a control means for executing a predetermined process; The predetermined event includes being connected to a non-permitted router that is not permitted to be used; the predetermined processing includes a processing for outputting a predetermined image signal from the external output or a processing for restricting output of the image signal from the external output, The determining means determines whether or not the connected router is an allowed router that is permitted to be used; When the determination means determines that the router is not the allowable router, the control means executes a process of outputting the predetermined image signal from the external output or a process of restricting output of the image signal from the external output until a predetermined condition is satisfied. A program characterized by:

7. A method for controlling an information processing device that is equipped with a display unit that displays an image in response to a user's operation and an external output that can output an image signal to the outside, and that can transmit and receive information via a network by connecting to a router, comprising: a determination step of determining whether or not a predetermined event has occurred; a control step of executing a predetermined process when it is determined in the determination step that the predetermined event has occurred; The predetermined event includes being connected to a non-permitted router that is not permitted to be used; the predetermined processing includes a processing for outputting a predetermined image signal from the external output or a processing for restricting output of the image signal from the external output, In the determining step, it is determined whether the connected router is an allowed router that is permitted to be used; In the control step, when it is determined in the determination step that the router is not the allowable router, a process of outputting the predetermined image signal from the external output or a process of restricting output of the image signal from the external output is executed until a predetermined condition is satisfied.

23. A method for controlling an information processing apparatus comprising:

Images