Information processing apparatus, method, program, and system
A program using a large language model automates the conversion of documents to new standards, reducing the effort required for updating documents to conform to new standards, such as ISMS and ISO9000, by inputting identification numbers and prompts.
Patent Information
- Application Number
- JP2024168563
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2024-09-27
- Publication Date
- 2025-07-04
- Estimated Expiration
- 2044-09-27
AI Technical Summary
Existing systems fail to efficiently update documents to conform to new standards, requiring laborious manual correction of content changes.
A program utilizing a large language model (LLM) to automatically convert documents from an old standard to a new standard by inputting identification numbers and prompts, enabling the LLM to generate updated documents.
Facilitates the creation of documents conforming to new standards with reduced labor and effort, supporting various standards like ISMS, NIST SP800-171, and ISO9000.
Smart Images

Figure 0007702686000001_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to an information processing apparatus, method, program, and system.
Background Art
[0002] In Patent Document 1, it is described that when there is a change in a document stored in a storage unit, the document management apparatus automatically and completely updates the reference description described in a string and a table format in a document having the changed document as a reference destination with the latest attributes of the changed document.
Prior Art Documents
Patent Documents
[0003]
Patent Document 1
Summary of the Invention
Problems to be Solved by the Invention
[0004] In Patent Document 1, although updating the reference description is described, updating the content of the document itself is not described.
[0005] When a standard (for example, ISMS: Information Security Management System) is updated, it is necessary to correct a document (for example, an in-house procedure manual, etc. Note that it may also be referred to as an in-house regulation, or an in-house document related to a standard or a criterion.) that conforms to the previous standard so as to conform to the updated standard. To correct the document, it is necessary to grasp the updated items, update contents, etc., which is laborious.
[0006] An object of the present disclosure is to create a document that conforms to a new standard with less labor when the standard is updated.
Means for Solving the Problems
[0007] A program for operating a computer comprising a processor and a memory, the program causing the processor to: store a prompt for causing a large language model to output a document conforming to an updated standard for each item included in the updated standard; receive an input of an identification number of an item included in the updated standard and a document conforming to the standard before the update; select a corresponding prompt from a plurality of prompts based on the identification number; input the document conforming to the standard before the update and the selected prompt into the large language model, and cause the large language model to output a document conforming to the standard after the update.
Advantages of the Invention
[0008] When the standard is updated, a written document conforming to the new standard can be created with less labor.
Brief Description of the Drawings
[0009]
Figure 1
Figure 2
Figure 3
Figure 4
Figure 5
Figure 6
Figure 7
Figure 8
Embodiments for Carrying Out the Invention
[0010] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In all the drawings for describing the embodiments, the same reference numerals are given to common components, and repeated descriptions are omitted. Note that the following embodiments do not unduly limit the content of the present disclosure described in the claims. Also, not all the components shown in the embodiments are essential components of the present disclosure. Further, each drawing is a schematic diagram and is not necessarily drawn precisely.
[0011] Also, in the following description, a "processor" refers to one or more processors. At least one processor is typically a microprocessor such as a CPU (Central Processing Unit), but may also be other types of processors such as a GPU (Graphics Processing Unit). At least one processor may be single-core or multi-core.
[0012] Also, at least one processor may be a processor in a broad sense, such as a hardware circuit (e.g., FPGA (Field-Programmable Gate Array) or ASIC (Application Specific Integrated Circuit)) that performs part or all of the processing.
[0013] Also, in the following description, expressions such as "xxx table" may be used to describe information from which an output is obtained for an input, but this information may be data of any structure or a learning model such as a neural network that generates an output for an input. Therefore, "xxx table" can be referred to as "xxx information".
[0014] Also, in the following description, the configuration of each table is an example, and one table may be divided into two or more tables, or all or part of two or more tables may be one table.
[0015] In the following description, the "program" may be used as the subject to describe the processing. However, since the program performs the defined processing by being executed by a processor, using the storage unit and / or the interface unit as appropriate, etc., the subject of the processing may be the processor (or a device such as a controller having the processor).
[0016] The program may be installed in a device such as a computer, or may be, for example, in a program distribution server or a computer-readable (e.g., non-transitory) recording medium. Also, in the following description, two or more programs may be realized as one program, or one program may be realized as two or more programs.
[0017] Also, in the following description, an identification number is used as identification information for various objects, but other types of identification information (e.g., an identifier including letters or symbols) may be adopted.
[0018] Also, in the following description, when describing elements of the same type without distinction, reference signs (or common signs among the reference signs) are used, and when describing elements of the same type separately, the identification numbers (or reference signs) of the elements may be used.
[0019] Also, in the following description, the control lines and information lines show those considered necessary for the description, and not necessarily all the control lines and information lines on the product. All the components may be interconnected.
[0020] Each information processing device is configured by a computer including an arithmetic unit and a storage unit. The basic hardware configuration of the computer and the basic functional configuration of the computer realized by the hardware configuration will be described later. For each of the server 20 and the terminal device 10, descriptions overlapping with the basic hardware configuration of the computer and the basic functional configuration of the computer described later are omitted.
[0021] <Overview> When the standard is updated, the system according to this embodiment uses a large language model (LLM) to rewrite a document compliant with the past standard into content compliant with the updated standard. The system stores a prompt corresponding to each item of the updated standard for each item. The system inputs the prompt for each item and the document compliant with the item in the past standard into the LLM, and outputs a document compliant with the updated standard. The standards include, for example, ISMS (ISO / IEC 27001, ISO / IEC 27002), NIST SP800-171, NIST SP800-53, ISO9000, ISO14000, ISO22301, or ISO20000, etc., but are not limited thereto.
[0022] <1. Overall configuration diagram of the system> FIG. 1 is a block diagram showing an example of the overall configuration of system 1. The system 1 shown in FIG. 1 includes, for example, a terminal device 10, a server 20, and an LLM system 30. The terminal device 10, the server 20, and the LLM system 30 are communicatively connected via, for example, a network 80.
[0023] In FIG. 1, an example in which system 1 includes two terminal devices 10 is shown, but the number of terminal devices 10 included in system 1 is not limited to two. The number of terminal devices 10 included in system 1 may be one, or may be three or more.
[0024] In FIG. 1, an example in which system 1 includes one LLM system 30 is shown, but the number of LLM systems 30 included in system 1 is not limited to one. The number of LLM systems 30 included in system 1 may be two or more.
[0025] In FIG. 1, an example in which the server 20 is independent of the LLM system 30 is shown, but the server 20 may include the functions of the LLM system 30. That is, the server 20 may store the LLM.
[0026] In this embodiment, an aggregate of a plurality of devices may be regarded as one server. The way of distributing the plurality of functions required to implement the server 20 according to this embodiment to one or more pieces of hardware can be appropriately determined in view of the processing capabilities of each piece of hardware and / or the specifications required for the server 20 and the like.
[0027] The terminal device 10 shown in FIG. 1 is an information processing device used by a user who uses the service provided by the server 20. For example, the terminal device 10 is an information processing device operated by a user who uses the document output service provided by the server 20 and creates a document. The terminal device 10 is realized by, for example, a desktop PC (Personal Computer), a laptop PC, a head-mounted display, or the like. Further, the terminal device 10 may be a computer having portability such as a smartphone or a tablet terminal.
[0028] The terminal device 10 includes a communication IF (Interface) 12, an input device 13, an output device 14, a memory 15, a storage 16, and a processor 19. The input device 13 is a device for receiving an input operation from a user (for example, a pointing device such as a touch panel, a touch pad, a mouse, etc., a keyboard, etc.). The output device 14 is a device for presenting information to the user (a display, a speaker, etc.).
[0029] The server 20 is an information processing device that provides a document output service. The server 20 is, for example, an information processing device realized by a computer connected to the network 80. As shown in FIG. 1, the server 20 includes a communication IF 22, an input / output IF 23, a memory 25, a storage 26, and a processor 29. The input / output IF 23 functions as an interface between an input device for receiving an input operation from a user and an output device for outputting information to the user.
[0030] The LLM system 30 is a system in which a large-scale artificial intelligence model (LLM) used in the field of natural language processing (NLP), for example, is constructed. By learning a large amount of text data (web pages, books, articles, etc.), the LLM can understand the patterns of the language used by humans and effectively execute natural language generation (NLG) tasks.
[0031] The LLM is used in many NLP tasks such as generating responses to specific questions, automatically generating articles, summarizing text, translation, sentiment analysis, etc. It can also be utilized in various applications such as education, entertainment, customer service, product development, etc. There are, for example, the following types of LLMs. · GPT-4 (registered trademark) (OpenAI) · PaLM2 (registered trademark) (Google) · StableLM (StableAI) · Llama2 (Meta)
[0032] The LLM system 30 inputs text data and prompts from the server 20 into the LLM and causes the LLM to output responses based on the input text data and prompts. The LLM system 30 transmits the responses output from the LLM to the server 20.
[0033] Each information processing device is composed of a computer equipped with an arithmetic device and a storage device. The basic hardware configuration of the computer and the basic functional configuration of the computer realized by the hardware configuration will be described later. For each of the terminal device 10 and the server 20, descriptions overlapping with the basic hardware configuration of the computer and the basic functional configuration of the computer to be described later are omitted.
[0034] <2. Configuration of Terminal Device> FIG. 2 is a block diagram showing a functional configuration example of the terminal device 10. As shown in FIG. 2, the terminal device 10 includes a communication unit 120, an input device 13, an output device 14, an audio processing unit 17, a microphone 171, a speaker 172, a camera 160, a position information sensor 150, a storage unit 180, and a control unit 190. Each block included in the terminal device 10 is electrically connected, for example, by a bus or the like.
[0035] The communication unit 120 performs processes such as modulation / demodulation processing for the terminal device 10 to communicate with other devices. The communication unit 120 performs transmission processing on the signal generated by the control unit 190 and transmits it to the outside (for example, the server 20). The communication unit 120 performs reception processing on the signal received from the outside and outputs it to the control unit 190.
[0036] The input device 13 is a device for a user operating the terminal device 10 to input instructions or information. The input device 13 is realized, for example, by a touch-sensitive device 131 or the like where an instruction is input by touching an operation surface. When the terminal device 10 is a PC or the like, the input device 13 may be realized by a reader, a keyboard, a mouse, or the like. The input device 13 converts the instruction input from the user into an electrical signal and outputs the electrical signal to the control unit 190. Note that the input device 13 may include, for example, a reception port for receiving an electrical signal input from an external input device.
[0037] The output device 14 is a device for presenting information to the user operating the terminal device 10. The output device 14 is realized, for example, by a display 141 or the like. The display 141 displays data according to the control of the control unit 190. The display 141 is realized, for example, by an LCD (Liquid Crystal Display), an organic EL (Electro-Luminescence) display, or the like.
[0038] The audio processing unit 17 performs, for example, digital-to-analog conversion processing of an audio signal. The audio processing unit 17 converts the signal given from the microphone 171 into a digital signal and gives the converted signal to the control unit 190. Also, the audio processing unit 17 gives the audio signal to the speaker 172. The audio processing unit 17 is realized by, for example, a processor for audio processing. The microphone 171 receives an audio input and gives an audio signal corresponding to the audio input to the audio processing unit 17. The speaker 172 converts the audio signal given from the audio processing unit 17 into audio and outputs the audio to the outside of the terminal device 10.
[0039] The camera 160 is a device that receives light by a light receiving element and outputs it as a shooting signal.
[0040] The position information sensor 150 is a sensor that detects the position of the terminal device 10, and is, for example, a GPS (Global Positioning System) module. The GPS module is a receiving device used in a satellite positioning system. In the satellite positioning system, signals from at least three or four satellites are received, and based on the received signals, the current position of the terminal device 10 on which the GPS module is mounted is detected. The position information sensor 150 may detect the current position of the terminal device 10 from the position of the radio base station to which the terminal device 10 is connected.
[0041] The storage unit 180 is realized by, for example, the memory 15, the storage 16, etc., and stores data and programs used by the terminal device 10. The storage unit 180 stores, for example, the user information 181.
[0042] The user information 181 includes, for example, information about the user who uses the terminal device 10. The information about the user includes, for example, the user's name, age, address, date of birth, contact information, etc.
[0043] The control unit 190 is realized by the processor 19 reading the program stored in the storage unit 180 and executing the instructions included in the program. The control unit 190 controls the operation of the terminal device 10. By operating according to the program, the control unit 190 functions as an operation reception unit 191, a transmission / reception unit 192, and a presentation control unit 193.
[0044] The operation reception unit 191 performs processing for receiving an instruction or information input from the input device 13. Specifically, for example, the operation reception unit 191 receives an instruction or information input from the touch-sensitive device 131 or the like.
[0045] Also, the operation reception unit 191 receives a voice instruction input from the microphone 171. Specifically, for example, the operation reception unit 191 receives a voice signal input from the microphone 171 and converted into a digital signal by the voice processing unit 17. The operation reception unit 191 obtains an instruction from the user, for example, by analyzing the received voice signal and extracting a predetermined noun.
[0046] The transmission / reception unit 192 performs processing for the terminal device 10 to transmit and receive data to and from an external device such as the server 20 according to a communication protocol. Specifically, for example, the transmission / reception unit 192 transmits information input by the user or an instruction from the user to the server 20. Also, the transmission / reception unit 192 receives information provided from the server 20.
[0047] The presentation control unit 193 controls the output device 14 in order to present the information provided from the server 20 to the user. Specifically, for example, the presentation control unit 193 causes the display 141 to display information regarding a document transmitted from the server 20. Also, the presentation control unit 193 causes the speaker 172 to output the information transmitted from the server 20.
[0048] <3. Functional Configuration of Server> FIG. 3 is a diagram showing a functional configuration example of the server 20. As shown in FIG. 3, the server 20 functions as a communication unit 201, a storage unit 202, and a control unit 203.
[0049] The communication unit 201 performs processing for the server 20 to communicate with an external device.
[0050] The storage unit 202 has, for example, a user information table 2021, a prompt table 2022, and the like. The tables stored in the storage unit 202 are not limited to these.
[0051] The user information table 2021 is a table that stores information about users. Details will be described later.
[0052] The prompt table 2022 is a table that stores information about prompts that are input sentences for the LLM system 30. Details will be described later.
[0053] The control unit 203 is realized by the processor 29 reading a program stored in the storage unit 202 and executing instructions included in the program. The program includes applications such as a web browser application. The program includes programming languages such as JavaScript (registered trademark) that are executed on a web browser application stored in the terminal device 10. The control unit 203 functions as a reception control module 2031, a transmission control module 2032, a service processing module 2033, and a presentation control module 2034 by operating according to the program.
[0054] The reception control module 2031 controls the process in which the server 20 receives a signal from an external device according to a communication protocol.
[0055] The transmission control module 2032 controls the process in which the server 20 transmits a signal to an external device according to a communication protocol.
[0056] The service processing module 2033 controls the process of outputting a document according to the input from the user.
[0057] The prompt control module 2034 controls the process of presenting information to the user.
[0058] <4. Data Structure> The data structure of the table stored in the server 20 is described. Note that the data structure to be described is an example, and it does not exclude data not described. Also, even for data described in the same table, it may be stored in separate storage areas in the storage unit 202.
[0059] Figure 4 is a diagram showing the data structure of the user information table 2021. The user information table 2021 shown in Figure 4 is a table having columns for name, age, gender, date of birth, and contact information, with the user ID as the key.
[0060] The user ID is an item that stores an identifier for uniquely identifying the user. The name is an item that stores the user's name. The age is an item that stores the user's age. The gender is an item that stores the user's gender. The date of birth is an item that stores the user's date of birth. The contact information is an item that stores the contact information (e.g., phone number, email address, etc.) of the terminal device 10 that the user has.
[0061] Figure 5 is a diagram showing the data structure of the prompt table 2022. The prompt table 2022 shown in Figure 5 is a table having columns for prompt data and item number, with the prompt ID as the key.
[0062] The prompt ID is a column that stores an identifier for uniquely identifying the prompt. The prompt ID is assigned for each item that constitutes the standard. For example, in Figure 5, item 1.1 is assigned to the prompt ID P0001.
[0063] Prompt data is an item that stores data related to the prompt (instruction) input to the LLM. The prompt data is stored for each reference item. The data related to the prompt is, for example, text information for causing the LLM to output a document. The text information is an instruction for revising a document compliant with the previous standard to be compliant with the updated standard. In other words, the text information is an instruction for causing the LLM to output a document compliant with the updated standard. Also, in other words, the text information is an instruction for causing the LLM to output a document (new document) compliant with the updated standard by using the structure of a document (old document) compliant with the previous standard. Note that each prompt data may store the body text of the reference item assigned to the prompt data. For example, in FIG. 5, prompt data 1 stores the text of item 1.1 in the standard, that is, the original text of item 1.1 in the standard.
[0064] In the text information, for example, the content for specifying the information is blank, and a predetermined content is to be inserted when using it. Specifically, the text information includes the following content. "The text in the updated standard is... The input text is the current company regulations, and its content is {}. Please revise the current company regulations while conforming to the text in the standard." Among the above text information, {} is blank, and a predetermined content is inserted when using it.
[0065] The item number is a column that stores an identifier for uniquely identifying the items that make up the standard. For example, in ISМS, what corresponds to the item number is the management measure number. Also, in the case of NIST SP800-171 and NIST SP800-53, what corresponds to the item number is the management measure. Also, in the case of ISO9000, ISO14000, ISO22301, or ISO20000, etc., what corresponds to the item number is, for example, the requirement item number.
[0066] <5. Operation> An example of the processing flow in system 1 will be described.
[0067] FIG. 6 is a flowchart showing an example of the operation of server 20 when outputting a document according to a user's request. In the description of FIG. 6, server 20 provides a service for outputting a document as SaaS (Software as a Service).
[0068] First, a user who wants to output a document accesses server 20. The user logs in to the service for outputting a document provided by server 20 by, for example, entering his / her user ID and password.
[0069] In step S1001, terminal device 10 receives an item number and a document from the user. Specifically, operation reception unit 191 receives the item number. Also, specifically, operation reception unit 191 receives a document compliant with the pre-update standard, that is, a document whose revision due to the update of the standard is desired by the user (for example, the current company regulations. Hereinafter, referred to as the old document). The user inputs the item number and the old document to the user interface provided by server 20 on terminal device 10. Note that a plurality of item numbers may be input. The old document may not be input.
[0070] Also, for example, the input user interface is in the form of a chatbot. Also, for example, the user interface may be in the form of radio buttons or a pull-down menu when receiving the item number.
[0071] In step S1002, terminal device 10 transmits the item number and the old document received from the user to server 20. Specifically, transceiver unit 192 transmits the item number and the old document to reception control module 2031.
[0072] In step S1003, the server 20 completes the prompt based on the transmitted item number and the old document. Specifically, the service processing module 2033 selects the prompt stored in the prompt data corresponding to the transmitted item number in the prompt table 2022. The service processing module 2033 fills the blank where the current in-house regulations in the text information of the prompt should be entered with the transmitted old document. Thereby, the prompt is completed.
[0073] In step S1004, the server 20 inputs the prompt to the LLM. Specifically, the transmission control module 2032 transmits the completed prompt to the LLM system 30. The LLM system 30 inputs the transmitted prompt to the LLM.
[0074] Note that the prompt input to the LLM in step S1004 is not limited to the one completed in step S1003. For example, the text information of the prompt stored in the prompt table 2022 may not have an argument (e.g., {}). The server 20 inputs the prompt and the old document to the LLM.
[0075] In step S1005, the server 20 causes the LLM system 30 to output a document. Specifically, the LLM outputs a document in response to the input prompt. The output document is the old document revised according to the updated standard (hereinafter referred to as the new document). The server 20 causes the LLM system 30 to transmit the new document output from the LLM to the server 20 as text data. The server 20 receives the text data transmitted from the LLM system 30.
[0076] Note that if no old document is input in step S1001, the LLM system 30 outputs a document based on the updated standard as the new document. For example, the LLM system 30 outputs the text of the updated standard as the new document as it is. Or, for example, the LLM system 30 outputs a new document according to a prompt that defines the in-house regulations document format.
[0077] In step S1006, the server 20 presents a new document to the terminal device 10. Specifically, for example, the presentation control module 2034 presents the new document output from the LLM system 30 to the terminal device 10. The transmission control module 2032 transmits information for displaying the new document to the terminal device 10. Also, the transmission control module 2032 may transmit the new document to the terminal device 10 in a file format.
[0078] In step S1007, the terminal device 10 displays the new document to the user. Specifically, the presentation control unit 193 displays the new document on the display 141 based on the information transmitted from the server 20. The format in which the new document is presented may be adapted to the input user interface in step S1001. For example, when the user interface is in the form of a chatbot, the presentation control unit 193 displays the new document on the display 141 in a style in which the document output service provider responds to the user's input.
[0079] <6. Screen Example> FIG. 7 is a schematic diagram showing an example of the display screen of the display 141 of the terminal device 10. In FIG. 7, the case where the interface when an instruction is input from the user in step S1001 and the interface when a new document is output in step S1007 are in the form of a chatbot will be described as an example.
[0080] The speech bubble 1101 is a speech bubble for the user to input the item number and the old document in step S1001. For example, in FIG. 7, 8.1 is the item number, and the subsequent text is the old document. The item number and the old document are displayed in the speech bubble 1101 until the user ends the document output service (for example, until the screen in FIG. 7 is closed by the user).
[0081] Icon 1102 is an icon indicating the user. For example, in FIG. 7, icon 1102 is a human-shaped icon. By arranging icon 1102 close to the tail of speech bubble 1101, icon 1102 indicates that the speaker of speech bubble 1101 is the user. The name of the user may be noted together with icon 1102.
[0082] Speech bubble 1103 is a speech bubble for the terminal device 10 to present a new document to the user in step S1007. For example, in FIG. 7, a new document of "8.1 User Terminal Device" corresponding to item 8.1 in the company regulations is presented in speech bubble 1103. Information related to the new document (for example, the number of characters in the text of the new document) may be noted together with the text of the new document. Until the user ends the document output service (for example, until the screen in FIG. 7 is closed by the user), the text of the new document and the information related to the new document are displayed in speech bubble 1103.
[0083] Icon 1104 is an icon indicating the document output service provider. For example, in FIG. 7, icon 1104 is a robot-shaped icon. By arranging icon 1104 close to the tail of speech bubble 1103, icon 1104 indicates that the speaker of speech bubble 1103 is the document output service provider. The name of the document output service provider may be noted together with icon 1104.
[0084] <7. Parentheses> As described above, in the above embodiment, the server 20 stores, for each item included in the updated standard, a prompt for causing the large language model to output a document conforming to the updated standard. The terminal device 10 receives an input of the identification number of the item included in the updated standard and the document conforming to the standard before the update. The server 20 selects a corresponding prompt from a plurality of prompts based on the identification number. The server 20 inputs the document conforming to the standard before the update and the selected prompt into the LLM, and causes the LLM to output a document conforming to the standard after the update. Thereby, when the standard is updated, the user can create in-house regulations and the like conforming to the updated standard for each item in the standard with less effort.
[0085] Also, in the above embodiment, the standard is ISMS, NIST SP800-171, NIST SP800-53, ISO9000, ISO14000, ISO22301, or ISO20000, etc. The document is output based on the prompt stored for each item of the standard. Thereby, it becomes easy to create documents for a wide variety of standards.
[0086] Also, in the above embodiment, the prompt is designed to cause the LLM to output a document conforming to the standard after the update by using the structure of the document conforming to the standard before the update. Thereby, the user can easily create a document of the new standard that follows the current in-house regulations, and is liberated from the labor of creating a document while following the in-house regulations.
[0087] Also, in the above embodiment, the prompt is designed to cause the LLM to output a document based on the standard after the update when a document conforming to the standard before the update is not input. Thereby, the user can receive the text of the standard after the update in the document format specified in the prompt.
[0088] <8. Variation>
[0089] In the above embodiment, as shown in step S1005, the prompt is designed to cause the large language model (LLM) to output a document (new document) compliant with the updated standard by using the structure of the document (old document) compliant with the standard before the update. However, it is assumed that the elements of the items included in the updated standard are not reflected in the document (new document) compliant with the updated standard because the structure of the document (old document) compliant with the standard before the update is used. Specifically, an element is the content to be observed in the items included in the standard.
[0090] Therefore, the prompt may be designed to cause the LLM to propose the elements of the items included in the updated standard that were not reflected in the document (new document) compliant with the updated standard because the structure of the document (old document) compliant with the standard before the update was used. Specifically, the text information of the prompt includes the following content. "The text in the updated standard is... The input text is the current company regulations, and its content is {}. Please revise the current company regulations while conforming to the text in the standard. Compare the revised company regulations with the updated standard and propose the elements lacking in the revised company regulations."
[0091] The elements may be proposed as the text in the standard as it is, or may be proposed according to the prompt that defines the document format of the company regulations.
[0092] In step S1005, the server 20 causes the LLM system 30 to output the elements together with the new document. In step S1006, the server 20 presents the proposal of the elements to the terminal device 10 together with the new document. In step S1007, the terminal device 10 displays the new document together with the proposal of the elements on the display 141.
[0093] <Basic Hardware Configuration of a Computer> FIG. 8 is a block diagram showing the basic hardware configuration of computer 90. Computer 90 includes at least a processor 901, a main memory device 902, an auxiliary storage device 903, and a communication IF 991 (Interface). These are electrically connected to each other by a communication bus 921.
[0094] The processor 901 is hardware for executing an instruction set described in a program. The processor 901 is composed of an arithmetic unit, registers, peripheral circuits, and the like.
[0095] The main memory device 902 is for temporarily storing a program and data processed by the program and the like. For example, it is a volatile memory such as DRAM (Dynamic Random Access Memory).
[0096] The auxiliary storage device 903 is a storage device for storing data and programs. For example, it includes a flash memory, an HDD (Hard Disc Drive), a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, and the like.
[0097] The communication IF 991 is an interface for inputting and outputting signals for communicating with other computers via a network using a wired or wireless communication standard. The network is composed of various mobile communication systems constructed by the Internet, LAN, wireless base stations, and the like. For example, the network includes 3G, 4G, 5G mobile communication systems, LTE (Long Term Evolution), a wireless network (e.g., Wi-Fi (registered trademark)) connectable to the Internet by a predetermined access point, and the like. When connecting wirelessly, communication protocols such as Z-Wave (registered trademark), ZigBee (registered trademark), Bluetooth (registered trademark), and the like are included. When connecting wired, the network includes those directly connected by a USB (Universal Serial Bus) cable or the like.
[0098] Note that all or part of each hardware configuration can be distributed and provided to a plurality of computers 90, and the computers 90 can be virtually realized by connecting them to each other via a network. In this way, the computer 90 is a concept that includes not only a single housing and the computer 90 housed in a case, but also a virtualized computer system.
[0099] <Basic functional configuration of computer 90> The functional configuration of the computer realized by the basic hardware configuration of the computer 90 (FIG. 8) will be described. The computer includes at least functional units of a control unit, a storage unit, and a communication unit.
[0100] Note that the functional units included in the computer 90 can also be realized by distributing all or part of each functional unit to a plurality of computers 90 interconnected by a network. The computer 90 is a concept that includes not only a single computer 90, but also a virtualized computer system.
[0101] The control unit is realized by the processor 901 reading out various programs stored in the auxiliary storage device 903 and expanding them in the main storage device 902, and executing processing according to the programs. The control unit can realize a functional unit that performs various information processes according to the type of program. Thereby, the computer is realized as an information processing device that performs information processing.
[0102] The storage unit is realized by the main storage device 902 and the auxiliary storage device 903. The storage unit stores data, various programs, and various databases. Also, the processor 901 can secure a storage area corresponding to the storage unit in the main storage device 902 or the auxiliary storage device 903 according to the program. Further, the control unit can cause the processor 901 to execute processes of adding, updating, and deleting data stored in the storage unit according to various programs.
[0103] A database refers to a relational database, which is for managing by associating tabular tables, called masters, structurally defined by rows and columns, with each other. In a database, a table is called a table, a master, a column of a table is called a column, and a row of a table is called a record. In a relational database, relationships between tables and masters can be set and associated. Normally, each table and each master are set with a column that serves as a primary key for uniquely identifying records, but setting a primary key for a column is not essential. The control unit can cause the processor 901 to add, delete, and update records in specific tables and masters stored in the storage unit according to various programs. Also, by storing data, various programs, and various databases in the storage unit, the information processing apparatus and information processing system according to the present disclosure can be regarded as being manufactured.
[0104] Note that the database and master in the present disclosure may include any data structure (such as a list, dictionary, associative array, object, etc.) in which information is structurally defined. The data structure shall also include data that can be regarded as a data structure by combining data with functions, classes, methods, etc. described in any programming language.
[0105] The communication unit is realized by the communication IF 991. The communication unit realizes the function of communicating with other computers 90 via a network. The communication unit can receive information transmitted from other computers 90 and input it to the control unit. The control unit can cause the processor 901 to execute information processing on the received information according to various programs. Also, the communication unit can transmit the information output from the control unit to other computers 90.
[0106] Furthermore, each of the above-described configurations, functions, processing units, processing means, etc. may be implemented in hardware by designing part or all of them, for example, by means of an integrated circuit. Also, the present invention can be implemented by a program code of software that realizes the functions of the embodiments. In this case, a storage medium recording the program code is provided to a computer, and a processor included in the computer reads the program code stored in the storage medium. In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the program code itself and the storage medium storing the same constitute the present invention. As a storage medium for supplying such a program code, for example, a flexible disk, a CD-ROM, a DVD-ROM, a hard disk, an SSD, an optical disk, a magneto-optical disk, a CD-R, a magnetic tape, a non-volatile memory card, a ROM, etc. are used.
[0107] Also, the program code for realizing the functions described in this embodiment can be implemented in a wide range of programs or script languages such as assembler, C / C++, perl, Shell, PHP, Java (registered trademark), etc.
[0108] Furthermore, by distributing the program code of the software that realizes the functions of the embodiments via a network, it can be stored in a storage means such as a hard disk or memory of a computer or a storage medium such as a CD-RW or CD-R, and a processor included in the computer can read and execute the program code stored in the storage means or the storage medium.
[0109] The functions realized by the components described in this specification may be implemented in circuitry or processing circuitry including a general-purpose processor, a specific-purpose processor, an integrated circuit, ASICs (Application Specific Integrated Circuits), a CPU (a Central Processing Unit), a conventional circuit, and / or a combination thereof, programmed to realize the described functions. The processor includes transistors and other circuits and is regarded as circuitry or processing circuitry. The processor may be a programmed processor that executes a program stored in a memory. In this specification, circuitry, unit, and means are hardware programmed to realize the described functions or hardware that executes the functions. The hardware may be any hardware disclosed in this specification or any hardware known as being programmed or executing to realize the described functions. When the hardware is a processor regarded as being of the circuitry type, the circuitry, means, or unit is a combination of the hardware and the software used to configure the hardware and / or the processor.
[0110] Some embodiments of the present disclosure have been described above. However, these embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and their modifications are to be included in the scope and gist of the invention, and are also to be included in the invention described in the claims and the equivalent scope thereof.
[0111] (Supplementary Note) The matters described in each of the above embodiments are appended below.
[0112] (Supplementary Note 1) A program for operating a computer comprising a processor and a memory, the program causing the processor to: store, for each item included in the updated standard, a prompt for outputting a document conforming to the updated standard to a large language model; receive an input of an identification number of an item included in the updated standard and a document conforming to the standard before the update; select a corresponding prompt from a plurality of prompts based on the identification number; input the document conforming to the standard before the update and the selected prompt into the large language model, and output a document conforming to the updated standard to the large language model. (Appendix 2) The standard is ISMS (ISO / IEC 27001, ISO / IEC 27002), NIST SP800-171, NIST SP800-53, ISO9000, ISO14000, ISO22301, or ISO20000, the program described in (Appendix 1). (Appendix 3) The prompt is designed to output a document conforming to the updated standard to the large language model by using the structure of the document conforming to the standard before the update, the program described in (Appendix 1) or (Appendix 2). (Appendix 4) The prompt is designed to cause the large language model to propose elements of items included in the updated standard that were not reflected in the document conforming to the updated standard because the structure of the document conforming to the standard before the update was used, the program described in (Appendix 3). (Appendix 5) The prompt is designed to output a document based on the updated standard to the large language model when a document conforming to the standard before the update is not input, the program described in any of (Appendix 1) to (Appendix 4). (Appendix 6) A method executed on a computer comprising a processor and a memory, the method comprising the processor executing all steps executed in the invention according to any of (Appendix 1) to (Appendix 5). (Appendix 7) An information processing apparatus including a control unit and a storage unit, wherein the control unit executes all steps executed in the invention according to any one of (Appendix 1) to (Appendix 5). (Appendix 8) A system including means for executing all steps executed in the invention according to any one of (Appendix 1) to (Appendix 5).
Explanation of reference numerals
[0113] 1…System 10…Terminal device 12…Communication IF 13…Input device 14…Output device 15…Memory 16…Storage 19…Processor 20…Server 22…Communication IF 23…Input / output IF 25…Memory 26…Storage 29…Processor 30…LLM system 80…Network
Claims
1. A program for operating a computer comprising a processor and a memory, the program causing the processor to store a plurality of instruction texts stored for each item included in the updated standard, the instruction texts including the body text of the items included in the updated standard and an instruction to revise a document compliant with the previous standard in accordance with the updated standard while utilizing the structure of the document compliant with the previous standard; receive an input of the identification numbers of the items included in the updated standard and a document compliant with the previous standard; select a corresponding instruction text from the plurality of instruction texts based on the identification numbers, and complete a prompt by adding the document compliant with the previous standard to the selected instruction text; input the prompt into the large language model and cause the large language model to output a document compliant with the updated standard; A program for causing the above to be executed.
2. The program according to claim 1, wherein the standard is ISMS (ISO / IEC 27001, ISO / IEC 27002), NIST SP800-171, NIST SP800-53, ISO9000, ISO14000, ISO22301, or ISO20000.
3. The program according to claim 1, wherein the instruction text further includes an instruction to cause the large language model to propose elements of an item included in the updated standard that were not reflected in the document compliant with the updated standard because the structure of the document compliant with the previous standard was utilized.
4. The program according to claim 1, wherein the instruction text further includes an instruction to cause the large language model to output a document based on the updated standard when a document compliant with the previous standard is not input.
5. A method executed on a computer comprising a processor and a memory, the method comprising the processor executing all steps executed in the invention according to any one of claims 1 to 4.
6. An information processing apparatus comprising a control unit and a storage unit, the control unit executing all steps executed in the invention according to any one of claims 1 to 4.
7. A system comprising means for performing all the steps performed in the invention according to any one of claims 1 to 4.
Citation Information
Patent Citations
System, apparatus and method of automatically verifying conformance of documents to standardized specifications
US20050114148A1
Method and system for a document-based knowledge system
US20110289549A1
Automatically generating digital enterprise content variants
US20190377785A1
Device, process and system for risk mitigation
US20210081566A1
Document management device, document management method and program
JP2017174319A