Time management device, work management system, information processing method and program

Abstract

To efficiently read and process data when IC cards using electronic certificate functions are used on a daily basis in time management devices such as entrance / exit management terminals and working management terminals.SOLUTION: A working management terminal 100, which can read IC card media, extracts operator information from information obtained from an IC chip in a personal identification card issued to a user, and recognizes an operator from the operator information and employee information 121. In reading out electronic certificate information from the acquired information, switching between a normal mode in which all of pieces of the electronic certificate information is read out, and a shortening mode in which a part of the electronic certificate information is read out when a type of the personal identification card is determined from the acquired information and the personal identification card is determined to have an electronic certificate function.SELECTED DRAWING: Figure 18

Description

[Technical Field]

[0001] The present invention relates to a time management device, a business management system, an information processing method, and a program that reads data from an IC card. [Background technology]

[0002] Since October 2015, each citizen has been notified of their My Number and issued a My Number card. It is not only used for personal identification purposes in administrative procedures, but is also increasingly being used by the private sector for identity verification purposes in financial services and as a point card. While using the My Number card as an ID card on a terminal is possible, there are high hurdles, such as the hassle of installation and the need to amend ordinances. Furthermore, the My Number cannot be used for purposes other than those specified by law.

[0003] Therefore, personal authentication is being carried out using the electronic certificate of the My Number Card. Patent Document 1 discloses a technology that reads the electronic certificate of the My Number Card and queries a server about the validity of the electronic certificate. Non-Patent Document 1 also discloses an example of reading the serial number (certificate identification number) data of the electronic certificate of the My Number Card and using it as a basis for identifying an individual.

[0004] However, the technology in Patent Document 1 has a problem with response speed because it queries an external server, and the technology in Non-Patent Document 1 does not query an external server, but it takes time to read the digital certificate. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Publication No. 2019-62284 [Non-patent literature]

[0006] [Non-Patent Document 1] "My Number Card Solution Implementation Case Study", [online], July 2017, NEC Corporation, [Retrieved October 14, 2021], Internet<URL:https: / / jpn.nec.com / kokyo / case / city.chiba / images / catalog_city.chiba.pdf> Summary of the Invention [Problem to be solved by the invention]

[0007] Therefore, the present invention aims to efficiently read and process data when an IC card with an electronic certificate function is used daily in a time management device such as an entry / exit management terminal or an employment management terminal. [Means for solving the problem]

[0008] According to the present invention, which solves the above problems, the following embodiments 1) to 9) are provided. 1) A time management device capable of reading an IC card medium, The clock section and a user information storage unit that stores user information; a card information acquisition unit that acquires information from an IC chip in a personal identification card issued to the user; an operator information authentication unit that recognizes the operator based on operator information of the operator who performed the time-stamping operation extracted from the acquired information and the stored user information; a time-stamp information generating unit that generates time-stamp information of the recognized operator based on the time indicated by the clock unit at the time of the time-stamping operation; a card type identification unit that determines the type of the personal identification card from the acquired information; Equipped with When the card type identification unit determines that the card type of the personal identification card is a card with an electronic certificate function, the card information acquisition unit is capable of switching between a normal mode in which the entire electronic certificate information is read and a shortened mode in which a part of the electronic certificate information is read when reading the electronic certificate information from the acquired information. Time management device.

[0009] The time management device described in 1) above can read both cards that use digital certificates for authentication and other cards, and perform authentication using the personal identification information read from the cards. Furthermore, when a card with a digital certificate function is read, the device can switch to a shortened mode, and when performing authentication in daily operations, the device can shorten processing time by reading only the necessary items. This allows for efficient processing of necessary information.

[0010] 2) The time management device according to 1) above, The card information acquisition unit acquires data of items set in acquisition target item information while repeatedly reading the electronic certificate information in a fixed size. Time management device.

[0011] According to the time management device described in 2) above, when reading in the shortened mode, the electronic certificate is read in fixed size increments, and processing is performed while checking whether reading of the pre-set items has been completed, thereby shortening the overall processing time.

[0012] 3) The time management device according to 2) above, In the short mode, the card information acquisition unit ends the reading process when a certificate identification number that uniquely identifies the digital certificate is read as the operator information. Time management device.

[0013] According to the time management device described in 3) above, the read process ends when the minimum necessary information has been read, so that the processing time can be reduced.

[0014] 4) The time management device according to 3) above, When the operator information authentication unit can recognize the operator by the read certificate identification number, the card information acquisition unit additionally acquires data on the validity start date and validity end date from the electronic certificate and confirms the validity of the electronic certificate. Time management device.

[0015] According to the time management device described in 4) above, by checking the validity of the electronic certificate, it is possible to import correct cards with no validity issues into the business management system, and to properly manage personnel, salary, and employment.

[0016] 5) The time management device according to any one of 1) to 4) above, the time management device is capable of executing a time stamp information generation mode for generating the time stamp information and an administrator mode operated by an administrator, When the time management device is operating in an administrator mode, if the card type identification unit determines that the type is a card with an electronic certificate function, the card information acquisition unit switches the mode for reading the electronic certificate information from the compact mode to the normal mode. Time management device.

[0017] According to the time management device described in 5) above, when operating in administrator mode, by switching the reading mode of electronic certificate information from abbreviated mode to normal mode, it becomes possible to check the consistency of data for all items, and personnel management, salary management, employment management, etc. can be performed appropriately.

[0018] 6) A time management system comprising the time management device according to 1) and a management server; the management server has a storage unit that stores the user information; If the operator information recognition unit is unable to recognize the operator, the time management device generates temporary time-stamp information using the time stamp information generation unit based on the time indicated by the clock unit at the time of the time stamp operation and the read digital certificate information, and transmits the temporary time-stamp information to the management server; The management server receives the provisional time-stamp information and stores it in the storage unit. If the operator can be recognized from the operator information included in the provisional time-stamp information and the stored user information, the management server generates the time-stamp information for the recognized operator. Business management system.

[0019] According to the business management system described in 6) above, even if an unregistered card is used, it will not be considered an error, and time stamp collection work can be carried out in accordance with the actual work situation, thereby improving convenience.

[0020] 7) A time management system comprising the time management device according to 1) and a management server; the management server has a storage unit that stores the user information and the electronic certificate information; the time management device generates IC card notification information including the user information and the read electronic certificate information and transmits the IC card notification information to the management server; The management server updates the stored electronic certificate information based on the IC card notification information. Business management system.

[0021] According to the business management system described in 7) above, correct cards without any problems can be imported into the business management system, and personnel management, salary management, employment management, etc. can be performed appropriately.

[0022] 8) An information processing method executed by a time management device that has a clock unit and is capable of reading an IC card medium, storing user information; acquiring information from an IC chip in a personal identification card issued to the user; a step of recognizing the operator based on operator information of the operator who performed the time-stamping operation extracted from the acquired information and the stored user information; generating time-stamp information of the recognized operator based on the time indicated by the clock unit at the time of the time-stamping operation; determining the type of the personal identification card from the acquired information; Including, When the card type of the personal identification card is determined to be a card with an electronic certificate function in the step of determining the type of the personal identification card, the step of acquiring the card information can be executed by switching between a normal mode in which the entire electronic certificate information is read and a shortened mode in which part of the electronic certificate information is read in reading the electronic certificate information from the acquired information. Information processing methods.

[0023] According to the information processing method described in 8) above, the necessary processing can be carried out efficiently.

[0024] 9) A time management device that has a clock unit and can read IC card media, storing user information; acquiring information from an IC chip in a personal identification card issued to the user; a step of recognizing the operator based on operator information of the operator who performed the time-stamping operation extracted from the acquired information and the stored user information; generating time-stamp information of the recognized operator based on the time indicated by the clock unit at the time of the time-stamping operation; determining the type of the personal identification card from the acquired information; Execute The step of acquiring the card information is configured such that, when the card type of the personal identification card is determined to be a card with an electronic certificate function in the step of determining the type of the personal identification card, reading of the electronic certificate information among the acquired information can be performed by switching between a normal mode in which the entire electronic certificate information is read and a shortened mode in which part of the electronic certificate information is read. A program that causes the time management device to function.

[0025] According to the program described in 9) above, the necessary processing can be performed efficiently. [Effects of the Invention]

[0026] According to the present invention, it is possible to read both IC cards with digital certificate functions and IC cards without digital certificate functions. Also, it is possible to switch between reading operations for IC cards with digital certificates, shortening the response time by targeting the minimum number of items in daily operations that require a response, while reading all items in situations such as card registration, allowing necessary processing to be performed when necessary. [Brief explanation of the drawings]

[0027] [Figure 1] 1 is a system configuration diagram according to an embodiment of the present invention; [Figure 2] FIG. 2 is a block diagram of a management server. [Figure 3] 10 is an example of a My Number management master stored in the management server. [Figure 4] 10 is an example of an employee master stored in a management server. [Figure 5] 10 is an example of clock-in / clock-out information stored in the management server. [Figure 6] 10 is an example of temporary time-stamp information stored in the management server. [Figure 7] FIG. 2 is a front view showing an example of the configuration of the work management terminal. [Figure 8] FIG. 2 is a configuration diagram of an employment management terminal. [Figure 9] 10 is an example of terminal parameter settings stored in the work management terminal. [Figure 10] 10 is an example of worker information stored in the work management terminal. [Figure 11] 10 is an example of a display unit of an employment management terminal. [Figure 12] 10 is an example of a display unit of an employment management terminal. [Figure 13] 10 is an example of a display unit of an employment management terminal. [Figure 14]10 is an example of electronic certificate definition information. [Figure 15] FIG. 1 is a conceptual diagram of the data structure of a digital certificate. [Figure 16] This is the operation flow when reading is performed in the normal mode. [Figure 17] 10 is an example of electronic certificate definition information stored in the work management terminal. [Figure 18] This is the operation flow when reading is performed in the compact mode. [Figure 19] 10 is an example of acquisition target item information stored in the work management terminal. [Figure 20] This is the flow of the time stamp operation. [Figure 21] 10 is an example of acquisition target item information stored in the work management terminal. [Figure 22] 10 is an example of data obtained from a digital certificate. [Figure 23] 10 is an example of acquisition target item information stored in the work management terminal. [Figure 24] 10 is an example of data obtained from a digital certificate. [Figure 25] 10 is an example of data recorded in the clock-in / clock-out information of the management server. [Figure 26] 10 is an example of data obtained from a digital certificate. [Figure 27] 10 is an example of a display unit of an employment management terminal. [Figure 28] 10 is an example of acquisition target item information stored in the work management terminal. [Figure 29] 10 is an example of data obtained from a digital certificate. [Figure 30] 10 is an example of data recorded in temporary time-stamp information of the management server. [Figure 31] 10 is an operational flow of a temporary timestamp storage process of the management server. [Figure 32] 10 is an example of clock-in / clock-out information stored in the management server. [Figure 33] 10 is an example of data obtained from a digital certificate. [Figure 34]10 is an example of My Number Card notification information stored in the management server. [Figure 35] 10 is an operational flow of the management server's My Number Card notification information storage process. DETAILED DESCRIPTION OF THE INVENTION

[0028] Hereinafter, embodiments of the present invention will be described with reference to the drawings. The following embodiments disclose preferred specific examples of the present invention, but the technical scope of the present invention is not limited to these aspects.

[0029] (Business Management System) Fig. 1 shows a work management system 1000 including a work management terminal 100, which is an embodiment of a time management device according to the present invention. The work management system 1000 shown in Fig. 1 is a business system that performs work management, payroll management, or personnel management and payroll management of, for example, company employees (workers). The work management system includes the work management terminal 100, a worker PC 300, a manager PC 400, and a management server 200. The devices that make up the work management system 1000 are connected to each other so that they can communicate with each other via a network N, such as an in-house local area network.

[0030] The work management terminal 100 is an embodiment of the time management device of the present invention, and is a device that has the function of recording time stamps by employees.

[0031] The employee PC 300 is a personal computer (PC) used by each employee for work. Each employee can use the employee PC 300 to access the management server 200, run web applications, and submit notifications related to employment and personnel information. Notifications related to personnel information include notifications of address changes, notifications of family changes, and notifications of Individual Numbers for the employee and their family members. Individual Numbers are used for social insurance procedures and tax procedures.

[0032] The administrator's PC 400 is, for example, a personal computer (PC) used by a human resources officer. The administrator checks the details of the notifications submitted by each employee on the employee's PC 300, and once approval processing is performed, the information is reflected in the database of the management server 200. The administrator's PC 400 is also equipped with an IC card reader, and in the presence of each employee, the IC card reader reads necessary information such as the certificate identification number of the electronic certificate from the employee's My Number card, and transmits it to the management server 200 for registration.

[0033] The management server 200 is a server computer that controls the work management and personnel management of each employee. Fig. 2 is a block diagram showing a detailed configuration of the management server 200. As shown in Fig. 2, the management server 200 includes a control unit 210, a storage unit 220, a display unit 230, an input unit 240, an interface unit 250, an external communication unit 260, and the like.

[0034] The storage unit 220, the display unit 230, the input unit 240, and the external communication unit 260 are connected to one another via an interface unit 250. The interface unit 250 is connected to the control unit 210 via a bus 270.

[0035] The storage unit 220 is configured with an HDD, SSD, ROM, RAM, etc. The storage unit 220 stores My Number management master 221, employee master 222, time-stamp information 223, provisional time-stamp information 224, etc.

[0036] The control unit 210 is configured as an information processing device having a CPU, memory, etc. As shown in Fig. 2, the control unit 210 has a temporary embossing information storage unit 211, a card information storage unit 212, etc. as functional blocks.

[0037] The provisional time-stamp information storage unit 211 reads the provisional time-stamp information 224 in the format shown in Figure 6 sent from the work management terminal 100, references the employee master 222 based on the name and date of birth in the provisional time-stamp information 224, obtains the corresponding personal code, and stores it in the time-stamp information 223 in the memory unit 220.

[0038] (Data stored in management server 200) As shown in Fig. 3, the management server 200 manages employees' My Numbers, which are necessary for social insurance procedures at government agencies, as My Number management master 221. In addition to the My Number, it also manages a certificate identification number (a certificate serial number different from the My Number) that uniquely distinguishes the electronic certificate of the My Number card, and the expiration date of the electronic certificate, with the aim of using the My Number card as a backup card for the employee card used on the in-house work management terminal 100 or entry / exit terminal.

[0039] FIG. 4 shows the employee master 222, in which the personal code, name, date of birth, sex, address, employee card identification number, etc. of each employee are registered.

[0040] FIG. 5 shows the time and attendance stamp information 223, which records the actual working hours of employees. The time and attendance stamp information includes time and attendance information indicating the actual time each employee arrives at work, leaves work, leaves work, and returns, as recorded by each employee's time and attendance stamp. The time and attendance stamp information stored in the time and attendance stamp information 223 is information created by each employee's daily time and attendance stamps, and is information that is updated or generated daily. When an employee clocks in using a work management terminal 100, the time and attendance stamp information is generated by the work management terminal 100, and the time and attendance stamp information is sent to the management server 200. The management server 200 stores and accumulates the time and attendance stamp information received from each work management terminal 100 in the time and attendance stamp information 223.

[0041] 6 shows provisional time-stamp information 224, which records the time when an employee punches in on the work management terminal 100, and the work management terminal 100 records information on a state where the link between the time-stamp operator and the worker information 121 has not yet been completed. In addition to the date, time, and time stamp when the time-stamp operation was performed, and the entry / exit category, the information recorded includes a certificate identification number obtained from the IC card, and personal information such as the name and date of birth obtained from the IC card as information used in the individual linking process.

[0042] (Work management terminal 100) Fig. 7 shows the external configuration of the work management terminal 100. Fig. 8 shows the configuration of the work management terminal 100 in more detail.

[0043] 8, the work management terminal 100 includes a control unit 110, a memory unit 120, a display unit 130, a bus 140, an interface unit 150, a clock unit 160, an operation input unit 170, a card reader 180, and an external communication unit 190. The display unit 130, the clock unit 160, the operation input unit 170, the card reader 180, and the external communication unit 190 are connected to each other via the interface unit 150. The memory unit 120 and the interface unit 150 are connected to the control unit 110 via the bus 140.

[0044] The storage unit 120 stores software (programs) for executing various functions of the work management terminal 100. The storage unit 120 is composed of an HDD, SSD, ROM, RAM, etc. The software may be installed, for example, via a recording medium or via a network. The storage unit 120 stores worker information 121 and terminal parameter settings 122. The storage unit 120 also functions as an internal memory that temporarily stores data being processed by the control unit 110.

[0045] 7 is a front view showing an example of the configuration of the work management terminal 100. The display unit 130 is a display such as a liquid crystal panel, and is typically installed on the front of the housing of the work management terminal 100, as shown in FIG.

[0046] The clock unit 160 keeps track of the current time and displays the time along with the date on the display unit. The operation input unit 170 inputs the time stamp type, which includes at least clock-in and clock-out, based on the operation of the worker (employee) who is the operator. In this embodiment, the operation input unit 170 is an input operation surface such as a touch sensor that constitutes part of the display unit 130, and as shown in Fig. 7, selection buttons (selection keys) for "Clock in," "Clock out," "Go out," and "Return" are arranged in the display area of ​​the display unit. However, without being limited to this, the operation input unit 170 may be configured with operation buttons or the like arranged in an area other than the display unit 130.

[0047] The card reader 180 acquires identification information from the operator and inputs that information. The card reader 180 is configured as a card reader capable of reading the operator's identification information (also referred to as operator information or worker information) from an ID card capable of contactless communication, such as an employee ID card issued to each employee. The operator inputs the operator's identification information into the work management terminal 100 by holding the ID card over the card reader surface 181 installed near the display unit 130. Examples of operator information include an employee code (personal code), an individual name, and a company code.

[0048] The external communication unit 190 is a communication module capable of communicating with the management server 200 via a network. The communication method is not particularly limited, and may be wired communication or wireless communication.

[0049] The control unit 110 is an information processing device including a CPU and memory, and performs various information processes by executing software stored in the storage unit 120. As shown in Fig. 8, the control unit includes, as functional blocks, an operator information authentication unit 111, a display control unit 112, a timestamp information generation unit 113, a card type identification unit 114, a card information acquisition unit 115, and the like.

[0050] The operator information authentication unit 111 recognizes the operator based on the operator's identification information acquired by the card information acquisition unit 115 and the worker information 121 stored in the storage unit 120 . The card type identification unit 114 identifies the type of the IC card held over the card reader surface 181. The card information acquisition unit 115 acquires data from an IC card held over the card reader surface 181 . The display control unit 112 generates an image to be displayed on the display unit 130. The display control unit 112 normally controls the display unit 130 so that a screen (FIG. 7) showing the current time, date, and type of stamping is displayed. The time-stamp information generating unit 113 generates the time-stamp information 223 using the operator's identification ID, the type of time-stamp input by the operator, and the time information acquired from the clock unit.

[0051] (Data stored in the work management terminal 100) FIG. 9 shows an example of the terminal parameter settings 122 stored in the storage unit 120 of the work management terminal 100, and includes an item for whether or not to check the validity of the electronic certificate. 10 shows an example of worker information 121 stored in the memory unit 120 of the work management terminal 100, which stores a personal code, name, card type, and identification ID, which is the personal identification ID of each employee on the work management terminal 100. The contents of the worker information 121 are sent in advance from the management server 200.

[0052] (Administrator mode / Time attendance input mode) Next, we will explain the operation modes of the work management terminal 100. The work management terminal 100 has at least an attendance input mode and an administrator mode as its operation modes. Fig. 11 is an example of the display unit 130 in the attendance input mode, showing buttons indicating user actions such as "Clock in / Clock out / Out / Return" and time information. When the user brings the ID card close to the card reader 180 while this screen is displayed, the time stamping process is performed and a screen such as that shown in FIG. 12 is displayed.

[0053] 11, when the transition button to the administrator mode is touched and the administrator card is read, the work management terminal 100 transitions to the administrator mode. Note that the transition procedure is not limited to this procedure.

[0054] Settings that can be configured in administrator mode include parameter settings such as the volume of the beep sound and the screen display density, and in this embodiment also include settings related to the registration process for employee My Number cards. The My Number card registration settings screen can be accessed by tapping the "Card Registration" button on the menu screen as shown in FIG. 13. Details of the My Number card registration process will be described later.

[0055] (About the digital certificate reading process) Next, the process of reading the digital certificate of the IC card performed in this embodiment will be described. The digital certificate is recorded with the data arranged in the order defined by the definition information as shown in FIG.

[0056] Figures 15 (A) and (B) are conceptual diagrams of the data structure of digital certificates, showing the digital certificate data of two different people. The digital certificate data shown here is arranged according to the definition information in Figure 14. Let's assume that you want to obtain the data of the same certificate identification number in the digital certificate. When reading the required data from an IC card, it is most efficient to specify the starting number of digits and the number of digits to read. In the digital certificate format shown in Figure 15(A), the starting digit of the certificate identification number is the 20th digit from the beginning, and the ending digit is the 30th digit from the beginning. Therefore, if you specify "starting number of digits: 20th digit, ending number of digits: 30th digit" and read, you can correctly and efficiently read the "certificate identification number" data of Mr. A and Mr. B's digital certificates.

[0057] However, in the case of digital certificates, the format may change during operation, and the number of digits in some of the data items within the digital certificate may change. Figure 15(B) shows the image of a situation where the number of digits in the item "△△△" immediately before the "certificate identification number" has changed, and only Person B has updated his digital certificate. In this state, even if you specify "start number of digits: 20th digit, end number of digits: 30th digit" and attempt to read, you will not be able to correctly obtain the data for Person B's "certificate identification number" in his digital certificate.

[0058] Because of the above structure, in conventional technology, even if only specific data items within the digital certificate were required, it was necessary to read the digital certificate one item at a time from the beginning, and only after reading the data of the intermediate items, could the required data items be read. Note that while Figure 15 shows each item of data being read from a single electronic certificate, this is the case for the sake of clarity and convenience. When reading data on a "certificate identification number" and "card holder's date of birth" from an "Individual Number Card," an example of an IC card, based on the specifications of the Individual Number Card, the "certificate identification number" is stored in one electronic certificate and the "card holder's date of birth" is stored in another electronic certificate. Therefore, if these pieces of information are required, the data must be read from separate electronic certificates. However, for the sake of simplicity, the following description of the embodiments will be written so that the required information is obtained from a single electronic certificate, regardless of the specifications of the actual Individual Number Card.

[0059] (How to read electronic certificates) Taking into account the characteristics of the electronic certificate as described above, this embodiment provides two modes for reading the electronic certificate in the IC card: a "normal mode" that reads all items, and a "short mode" that reads only the necessary items.

[0060] (Explanation of normal mode of digital certificate reading) FIG. 16 shows the operation flow when reading all items of a digital certificate in "normal mode." First, the card information acquisition unit 115 reads the entire electronic certificate recorded on the IC card and stores it in the internal memory of the work management terminal 100 (S101). Next, one item of data in the electronic certificate is acquired from the internal memory (S102). Next, this is compared with the definition information of the electronic certificate held in the internal memory (FIG. 17) to confirm that the data type actually stored matches (S103).

[0061] If they do not match (S104, No), it is determined that invalid data is included and an error is generated, and processing is terminated (S105). If they match the definition information (S104, Yes), a determination is made as to whether reading of all items in the electronic certificate has been completed (S106), and if not (S106, No), processing returns to S102, where the next item of data is obtained from internal memory and processing continues. If reading of all items has been completed, processing is terminated (S106, Yes).

[0062] By performing this process, the data in the digital certificate can be read while checking its consistency with the definition information. Reading in normal mode has the advantage of being able to confirm that the card is valid, such as when initially registering an IC card. However, because the data volume of the digital certificate is large, it takes time to read the entire digital certificate in step S101 in Fig. 16, which is a disadvantage, as it increases the overall processing time.

[0063] (Explanation of the short mode for reading electronic certificates) Considering the disadvantages of the normal mode, this embodiment has a "compact mode" that reads only the necessary items of the electronic certificate. Figure 18 shows the operation flow when reading the electronic certificate in the IC card in the compact mode.

[0064] First, rather than reading the entire electronic certificate recorded on the IC card, a predetermined number of digits is read and stored in the internal memory of the employment management terminal 100 (S201). Next, one item of data in the electronic certificate is retrieved from the internal memory (S202). Because the entire electronic certificate has not been read, there is a possibility that the data has been cut off, so a check is made. If the data has been cut off (S203, Yes), the process returns to S201, and additional data for the predetermined number of digits is retrieved from the IC card, and processing is restarted from the data for the item that was cut off. However, even if the data has been cut off, if all the necessary items have been read, no further data is read (S208, Yes) and processing is terminated, thereby shortening processing time.

[0065] If the acquired data is not cut off and can be acquired correctly (S203, No), the data is compared with the definition information of the digital certificate (Fig. 17) stored in internal memory to confirm whether the actual value and data type match (S204). If they do not match (S205, No), an error message such as "Invalid data included" is displayed on the display unit 130, and the process ends (S206).

[0066] If the result of the process of comparing the data in the digital certificate with the definition information of the digital certificate indicates that there are no abnormalities (S205, Yes), it is determined whether all of the acquired data in the internal memory has been read. If reading has not finished (S207, No), the next item of data is retrieved from the internal memory and the process is repeated. If reading has finished (S207, Yes), it is determined whether all of the necessary items have been read. Whether all of the necessary items have been read is determined by comparing the acquired data with the acquisition target item information (Figure 19) that holds the names of the items that need to be acquired from the digital certificate and is stored in the internal memory.

[0067] If it is determined that all necessary items have been read (S208, Yes), the process immediately ends. On the other hand, if it is determined that necessary items have not been read (S208, No), it is determined whether the entire electronic certificate has been read. If the entire electronic certificate has not been read (S209, No), the process returns to S201, and a fixed number of digits of data are additionally acquired from the IC card, and the process is restarted from the added point. If the entire electronic certificate has been read (S209, Yes), the process ends.

[0068] By performing the process of reading such an electronic certificate from an IC card in the shortened mode, the amount of processing required to read the electronic certificate from the IC card is reduced compared to normal mode by reading a fixed number of digits at a time, thereby shortening the overall processing time. It also makes it possible to efficiently obtain the necessary data from the electronic certificate. Specifically, while reading the entire certificate in normal mode takes about 1.5 seconds, reading only the certificate identification number, validity start date, and validity end date in the shortened mode takes about 0.2 to 0.5 seconds.

[0069] <Instructions for stamping operation> The following describes the processing performed by the work management terminal 100 according to the embodiment of the present invention. Fig. 20 shows the flow of the time stamping operation performed by the work management terminal 100. First, a screen such as that shown in FIG. 11 is displayed on the display unit 130 of the work management terminal 100, and the terminal is operating in the clock-in / clock-out input mode.

[0070] (Time stamping using substitute cards) The following explanation will be given using as an example a case where an operator with "personal code = 00000100" attempts to clock in using his / her employee card on the work management terminal 100 when coming to work, but forgets his / her employee card and instead clocks in using an IC card with electronic certificate function (My Number card) that he / she always carries as identification. In this case, it is assumed that the My Number card to be used as a substitute has already been registered in the management server 200 of the business management system, and that information has been sent to the work management terminal 100.

[0071] First, when the My Number card is brought close to the card reader 180 of the employment management terminal 100, the card reader 180 issues a command to read the employee card (S301). If there is a response (S302, Yes), the employment management terminal 100 determines that the card brought close is an employee card and executes employee card processing (S303). In the example shown, since it is not an employee card, it is determined that there is no response (S302, No), and the employment management terminal 100 sends a command to read a Type-B card, which is a command for IC cards with electronic certificates (S304).

[0072] If there is no response to the command to read the Type-B card (My Number card) (S305, No), the process ends. If there is a response (S305, Yes), it is confirmed that the card is a Type-B card, so the work management terminal 100 sends a command requesting the electronic certificate file (S306). If there is no response (S307, No), the process ends. If there is a response (S307, Yes), it is confirmed that the electronic certificate can be read, and the operation is in the time entry mode, so the electronic certificate reading operation mode is switched to the short mode (S308). The first acquisition target item information (FIG. 21) stored in the memory unit 120 is acquired, and the necessary data is acquired from the electronic certificate in the short mode described above, and the certificate identification number data is acquired (S309) as shown in FIG. 22.

[0073] The work management terminal 100 then performs operator information authentication processing, checking whether the operator information exists in the worker information 121 (FIG. 10) stored in the storage unit 120 (S310). If the operator information exists (S311, Yes), the terminal obtains the terminal parameter setting information 122 (FIG. 9) stored in the storage unit 120 and obtains the value indicating whether the electronic certificate has been validated (S312). If the operator information does not exist (S311, No), the terminal performs processing to accept the tentative time-stamp information 224 (S318).

[0074] If the validity of the electronic certificate has been confirmed (S312, Yes), data on the validity start date and validity end date are additionally acquired from the electronic certificate in the same shortened mode (S313) according to the second acquisition target item information (Fig. 23) stored in the storage unit 120. Fig. 24 shows the additionally acquired data.

[0075] Next, the validity of the electronic certificate is confirmed, and it is confirmed that the system date is within the range of the validity start date and validity end date (S314). If it is outside the validity range, it is determined to be invalid (S315, No), an error message is output, and processing ends (S316). If no error is found, it is assumed that there is no problem, and time-stamp information is generated and sent to the management server 200 via the external communication unit, and is recorded in the time-stamp information 223 in the memory unit of the management server 200 (S317). Figure 25 shows an example of data recorded in the time-stamp information 223 of the management server 200.

[0076] According to the above process, by checking the validity of the electronic certificate, it is possible to import correct cards with no validity issues into the business management system, and to properly manage personnel, payroll, employment, etc.

[0077] (Acceptance process of temporary stamp information 224) Next, using the same operational flow in Figure 20, we will explain an example case in which an operator with "personal code = 00000101" attempts to clock in using his / her employee card on the work management terminal 100 when coming to work, but forgets his / her employee card and instead clocks in using an IC card with electronic certificate function (My Number card) that he / she always carries as identification.Unlike the previous case, we assume that after the procedure for updating the electronic certificate on the My Number card has been completed, no information has been sent to the work management terminal 100 because an application for renewal has not yet been submitted to the business management system.

[0078] First, when the My Number card is brought close to the card reader 180 of the employment management terminal 100, a command to read the employee card is issued from the card reader 180 (S301). If it is not an employee card, it is determined that there is no response (S302, No), and a command to read the Type-B card, which is a command for IC cards with electronic certificates, is issued (S304). If there is no response (S305, No), processing ends. If there is a response (S305, Yes), it is confirmed that the card is a Type-B, and a command requesting the electronic certificate file is issued (S306). If there is no response (S307, No), processing ends. If there is a response (S307, Yes), it is confirmed that the electronic certificate can be read, and the operation is in the clock-in / clock-out input mode, so the electronic certificate reading operation mode is switched to the abbreviated mode (S308). The first acquisition target item information (Figure 21) stored in the memory unit 120 is acquired, and the necessary data is acquired from the electronic certificate in the shortened mode described above, and the certificate identification number data is acquired as shown in Figure 26 (S309).

[0079] Next, operator information authentication processing is performed, and a matching process is performed to determine whether operator information exists in the employee information 121 (FIG. 10) stored in the storage unit 120 (S310). In this example, since operator information does not exist (S311, No), the display unit 130 displays the message "This card has not yet been registered. Please enter the authentication code." along with a software keyboard (FIG. 27), and the system enters an input waiting state.

[0080] When the operator enters the authentication code, a message saying "Please hold your My Number card over the card again" is displayed on the display unit 130, and the operator holds up his or her My Number card (S318). The IC card is read by the card reader 180, and according to the third item information to be acquired (FIG. 28) stored in the memory unit 120, the name and date of birth data are acquired from the electronic certificate, also in abbreviated mode (S319). FIG. 29 shows the additionally acquired data.

[0081] Based on the acquired certificate identification number, name, and date of birth, provisional time-stamp information 224 is generated as time-stamp information for which linking between operator information and employee master 222 has not yet been completed, and data such as that shown in Fig. 30 is recorded in memory unit 220 of management server 200 via external communication unit 190. Fig. 30 shows an example of data recorded in time-stamp information 223 of management server 200.

[0082] By performing the above processing, the type of IC card read can be determined while operating in attendance input mode, and if it is identified as an IC card with a digital certificate function, only the necessary items can be read from the digital certificate in the shortened mode. Also, when reading in the shortened mode, data can first be read from the IC card using the first acquisition target item, and additional information can be read as needed by gradually using the second and third acquisition target item information. This makes it possible to appropriately acquire only the minimum amount of data necessary depending on the case.

[0083] <Storage process of temporary time-stamp information 224 in management server 200> Next, the flow of the process of storing the provisional time-stamp information 224, which is performed by the provisional time-stamp information storage unit 211 of the management server 200, will be described with reference to FIG.

[0084] First, one piece of data is read from the provisional time-stamp information 224 (FIG. 6) (S401). The employee master 222 (FIG. 4) is searched using the name and date of birth in the provisional time-stamp information 224 as keys to determine whether a matching individual exists (S402). In this example, the individual with "personal code = 00000101" matches (S403, Yes), so the data is added to the time-stamp information 223 (FIG. 32), and the processed data in the provisional time-stamp information 224 is deleted (S404). Next, an email is sent to the corresponding individual prompting them to update and register their My Number card (S405), and the process ends. Note that if a matching individual is not found when searching the employee master 222 based on the provisional time-stamp information 224 (S403, No), a list of unknown time-stampers is output (S406).

[0085] As described above, the series of processes performed by the work management terminal 100 and management server 200 allows the work management system 1000 to obtain only the minimum necessary additional information to generate time stamp information and later link it to an individual, even when an unregistered My Number card is used on the work management terminal 100. This allows time stamp collection work to be performed in accordance with the actual work situation without being treated as an error even when an unregistered card is used, improving convenience.

[0086] <Instructions for registering your My Number card> Next, we will explain the process of registering a My Number card on the employment management terminal 100. The following explanation assumes a case where an operator with "personal code = 00000101" brings a My Number card and performs registration in the presence of an administrator.

[0087] When the transition button to administrator mode is touched and the administrator card is read on the standby screen as shown in FIG. 11, the work management terminal 100 transitions to administrator mode, and an administrator menu screen as shown in FIG. 13 is displayed.

[0088] If the "Card Registration" button is selected here, the display unit 130 will display the message "Register your My Number card. First, please hold your employee card over the card reader." When the employee card is held over the card reader 180, the identification number is read from the employee card, and the employee information 121 (see Figure 10) in the terminal is searched to identify the target employee. In this example, the individual with "Personal Code = 00000101" is identified. Next, the message "Please hold your My Number card over the card reader" will be displayed, and when the operator holds the My Number card over the card reader 180, the operation is performed in administrator mode, so the electronic certificate is read in "normal mode." Once it has been confirmed that there are no problems with the data consistency of all items in the electronic certificate, the values ​​of the certificate identification number, validity start date, and validity end date are obtained, as shown in Figure 33.

[0089] Based on the acquired certificate identification number, validity start date, and validity end date, My Number card notification information is generated, and data such as that shown in Figure 34 is recorded in the memory unit 220 of the management server 200 via the external communication unit 190.

[0090] In this way, when operating in administrator mode, by switching the reading mode of the digital certificate information from the compact mode to the normal mode, the information read in administrator mode can be information without any loss.

[0091] (My Number Card Notification Information Storage Processing in Management Server 200) Next, the flow of the My Number card notification information storage process performed by the card information storage unit 212 of the management server 200 will be described with reference to FIG.

[0092] First, one piece of data is read from the My Number card notification information (already shown in Figure 34) (S501), and the employee master 222 (Figure 4) is searched using the personal code as a key (S502). If there is no matching individual (S503, No), the data is output to an error list (S504). If there is a matching individual (S503, Yes), the data for that individual is obtained from the My Number management master 221 (already shown in Figure 3), and the validity start date and end date before the update are compared with the validity start date and end date after the update to check for inconsistencies (S505). If there is a problem (S506, No), the data is output to an error list (S504). If there is no problem (S506, Yes), the certificate identification number and validity start date and end date in the My Number management master 221 are updated, and the process ends (S507).

[0093] As described above, a series of processes at the employment management terminal 100 and management server 200 allows the employment management terminal 100 to accept an application for renewal of the My Number card. At this time, the electronic certificate on the IC card is read in normal mode to check the consistency of all data items, and the management server 200 checks for any inconsistencies with the data previously registered. This allows a correct card without any problems to be imported into the business management system, allowing for appropriate personnel management, payroll management, employment management, etc.

[0094] (Variation) The present invention is not limited to the above-described embodiments and various modifications are possible. Any modifications are possible within the scope of the present invention. That is, any other configurations, algorithms, etc. for implementing the present technology may be adopted. It is also possible to combine at least two of the above-described characteristic features of the present invention. That is, the various characteristic features described in each embodiment may be combined arbitrarily without distinction between the embodiments. Furthermore, the various effects described above are merely examples and are not limiting, and other effects may also be achieved.

[0095] The time management device that reads IC cards in this embodiment can be suitably applied not only to the work management terminal 100, but also to an entry / exit management device for managing entry and exit to a specified area, a patrol management device for managing patrol work, a key box for managing keys, etc.

[0096] In the above embodiment, an example was shown in which a certificate identification number, validity start date, validity end date, name, date of birth, etc. were read from one electronic certificate, but it is also possible to read each piece of information from two or more different electronic certificates. For example, an electronic certificate for obtaining a certificate identification number and an electronic certificate for obtaining a name and date of birth may each be stored on an IC card, and the employment management terminal 100 may read information from each electronic certificate separately.

[0097] In the above embodiment, an example was shown in which digital certificate information was repeatedly read in a fixed size in the compact mode, but this is not limited to this, and the data length read may be changed each time it is read. For example, 30 digits may be read first, and then 10 digits may be read. This allows the necessary data to be read efficiently in response to changes in the digital certificate specifications. In the above embodiment, data for each item of the electronic certificate is actually read from two separate electronic certificates physically stored on one My Number card, but for convenience of explanation, it is described as being read from one electronic certificate. However, the number of electronic certificates from which data is read is not limited to one or two. Data for each item may be read from three or more electronic certificates. [Industrial Applicability]

[0098] The technology of the present invention can be suitably used in a business management system in an environment where business is conducted using personal identification cards with electronic certificate functions. [Explanation of symbols]

[0099] 1000···Business Management System 100: Work management terminal (time management device) 110 Control unit 111 Operator information authentication unit 112 Display control unit 113... Stamp information generation unit 114 Card type identification unit 115 Card information acquisition unit 120...Storage section 121...Employee information 130...Display section 160 Clock section 180···Card reader

Claims

1. A time management device capable of reading an IC card medium, The clock section and a user information storage unit that stores user information; a card information acquisition unit that acquires information from an IC chip in a personal identification card issued to a user; an operator information authentication unit that recognizes the operator based on operator information of the operator who performed the time-stamping operation extracted from the acquired information and the stored user information; a time-stamp information generating unit that generates time-stamp information of the recognized operator based on the time indicated by the clock unit at the time of the time-stamping operation; a card type identification unit that determines the type of the personal identification card from the acquired information; Equipped with When the card type identification unit determines that the card type of the personal identification card is a card with an electronic certificate function, the card information acquisition unit is capable of switching between a normal mode in which the entire electronic certificate information is read and a shortened mode in which a part of the electronic certificate information is read when reading the electronic certificate information from the acquired information. Time management device.

2. The time management device according to claim 1, The card information acquisition unit acquires data of items set in acquisition target item information while repeatedly reading the electronic certificate information in a fixed size. Time management device.

3. 3. The time management device according to claim 2, In the short mode, the card information acquisition unit ends the read process when a certificate identification number that uniquely identifies the electronic certificate information is read as the operator information. Time management device.

4. The time management device according to claim 3, When the operator information authentication unit can recognize the operator by the read certificate identification number, the card information acquisition unit additionally acquires data on the validity start date and validity end date from the electronic certificate information and confirms the validity of the electronic certificate information. Time management device.

5. The time management device according to any one of claims 1 to 4, the time management device is capable of executing a time stamp information generation mode for generating the time stamp information and an administrator mode operated by an administrator, When the time management device is operating in an administrator mode, if the card type identification unit determines that the type is a card with an electronic certificate function, the card information acquisition unit switches the mode for reading the electronic certificate information from the compact mode to the normal mode. Time management device.

6. A time management system comprising: the time management device according to claim 1; and a management server; the management server has a storage unit that stores the user information; If the operator information authentication unit is unable to recognize the operator, the time management device generates temporary time-stamp information using the time stamp information generation unit based on the time indicated by the clock unit at the time of the time stamp operation and the read digital certificate information, and transmits the temporary time-stamp information to the management server; The management server receives the provisional time-stamp information and stores it in the storage unit. If the operator can be recognized from the operator information included in the provisional time-stamp information and the stored user information, the management server generates the time-stamp information for the recognized operator. Business management system.

7. A time management system comprising: the time management device according to claim 1; and a management server; the management server has a storage unit that stores the user information and the electronic certificate information; the time management device generates IC card notification information including the user information and the read electronic certificate information and transmits the IC card notification information to the management server; The management server updates the stored electronic certificate information based on the IC card notification information. Business management system.

8. An information processing method executed by a time management device that has a clock unit and is capable of reading an IC card medium, comprising: storing user information; acquiring information from an IC chip in a personal identification card issued to a user; a step of recognizing the operator based on operator information of the operator who performed the time-stamping operation extracted from the acquired information and the stored user information; generating time-stamp information of the recognized operator based on the time indicated by the clock unit at the time of the time-stamping operation; determining the type of the personal identification card from the acquired information; Including, When the card type of the personal identification card is determined to be a card with an electronic certificate function in the step of determining the type of the personal identification card, the step of acquiring the information can be executed by switching between a normal mode in which the entire electronic certificate information is read and a shortened mode in which part of the electronic certificate information is read in reading the electronic certificate information from the acquired information. Information processing methods.

9. A time management device equipped with a clock unit and capable of reading IC card media, storing user information; acquiring information from an IC chip in a personal identification card issued to a user; a step of recognizing the operator based on operator information of the operator who performed the time-stamping operation extracted from the acquired information and the stored user information; generating time-stamp information of the recognized operator based on the time indicated by the clock unit at the time of the time-stamping operation; determining the type of the personal identification card from the acquired information; Execute When the type of the personal identification card is determined to be a card with an electronic certificate function in the step of determining the type of the personal identification card, the step of acquiring the information is configured to be able to switch between a normal mode in which the entire electronic certificate information is read and a shortened mode in which part of the electronic certificate information is read in reading the electronic certificate information from the acquired information. A program that causes the time management device to function.

Images