Display control device, display control method, and display control program

Abstract

This display control device stores advanced user interface (UI) rule information in which conditions pertaining to an operation sequence, operation time, and operation counts for permitting input operation to an advanced UI of a web system are set as rules for controlling input operation to the advanced UI. When, for example, input operation to an advanced UI relating to personal information is detected, the display control device assesses whether or not input operation to the advanced UI satisfies a condition for permitting input operation to the advanced UI, said condition being set in the advanced UI rule information. When it is assessed that input operation to the advanced UI does not satisfy the condition for permitting input operation to the advanced UI, the display control device limits input operation to advanced UIs following the aforementioned advanced UI.

Description

Technical Field

[0001] The present invention relates to a display control device, a display control method, and a display control program for a screen of a Web system.

Background Art

[0002] Conventionally, in order to assist a user's operation on a screen of a Web system, an extended UI (extended UI) for assisting the user's operation is prepared separately from the UI (existing UI) provided on the screen of the Web system, and the extended UI is overlaid on the existing UI on the screen. And when this extended UI receives a user's operation, the content of the operation is passed to the existing UI corresponding to the extended UI. Thereby, the Web system can process the user's operation as if it was performed on the existing UI (see Patent Document 1).

[0003] Here, rules regarding input operations are set for each extended UI so that a user can perform appropriate input operations on the screen of the Web system. For example, when the information that can be input to the existing UI on the screen of the Web system is restricted, an extended UI that displays the inputable information in a pull-down menu is prepared as the extended UI corresponding to the existing UI. And when the extended UI receives a user's selection input from the pull-down menu, the selected information is passed to the existing UI. By doing so, it is possible to assist the user's operation on the screen of the Web system without modifying the Web system itself.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] In some cases, personal information may be entered via an extended UI on the web system screen. In such cases, conventional technology lacks an authentication function for input using the extended UI, which poses a risk of personal information being entered through impersonation. Therefore, the present invention aims to solve the aforementioned problem and prevent input into the extended UI through impersonation. [Means for solving the problem]

[0006] To solve the aforementioned problems, the present invention is characterized by comprising: a storage unit that stores extended UI rule information which has conditions set for at least one of the operation order, operation time, and number of operations of the extended UI for permitting input operations to the extended UI as rules for controlling input operations to the extended UI of a Web system; a determination unit that, when it detects an input operation to a predetermined extended UI, determines whether the input operation to the extended UI satisfies the conditions for permitting the input operation to the extended UI set in the extended UI rule information; and a control processing unit that, if it is determined that the input operation to the extended UI does not satisfy the conditions for permitting the input operation to the extended UI, restricts input operations to extended UIs after the extended UI. [Effects of the Invention]

[0007] According to the present invention, it is possible to prevent input into the extended UI through impersonation. [Brief explanation of the drawing]

[0008] [Figure 1] Figure 1 is a diagram illustrating the general operation of the display control device. [Figure 2] Figure 2 is a diagram illustrating the operation overview of the display control device in detail. [Figure 3] Figure 3 shows an example of the configuration of a display control device. [Figure 4] Figure 4 is a flowchart showing an example of the processing procedure of a display control device. [Figure 5]Figure 5 shows an example of a computer that runs a display control program. [Modes for carrying out the invention]

[0009] Embodiments of the present invention will be described below with reference to the drawings. However, the present invention is not limited to the embodiments described below.

[0010] [Extended UI] First, the extended UI (User Interface) in this embodiment will be briefly explained. For example, as shown in Figure 1, the extended UI is a UI that is overlaid on the existing UI (the UI originally provided by the Web system) that makes up the screen of the Web system in order to assist the user of the Web system. For example, the extended UI displays input candidates for the user based on the rules set in the extended UI and accepts selection input (input operation) from the user. The content of the extended UI and its input operation is then passed to the existing UI corresponding to the extended UI. The Web system then processes based on the content of the operation passed to the existing UI. As a result, the Web system processes the user's operation as if it had been performed on the existing UI. This extended UI can be realized, for example, by the technology described in Patent Document 1.

[0011] [overview] Next, the operation overview of the display control device of this embodiment will be explained using Figure 2. The display control device sets conditions for permitting input to an extended UI, which accepts input of personal information, etc., in a Web system, as rules for the extended UI.

[0012] For example, as shown in Figure 2, the display control device accepts the setting of conditions such as the operation sequence, operation time, and number of operations for the extended UI as conditions for permitting input operations on the extended UI.

[0013] For example, as shown in Figure 2, for an extended UI (dropdown 1) that accepts input of the year of birth via a dropdown menu, a condition (rule 1) is accepted that allows input to the extended UI if the operation time to the extended UI is 5 seconds or less and the number of operations is 1.

[0014] Furthermore, for the extended UI (Dropdown 2) that accepts input of the month of birth via a dropdown menu, the system accepts setting a condition (Rule 2) that allows input to the extended UI if the operation sequence for the extended UI is after the input for the extended UI (Dropdown 1), the operation time is 5 seconds or less, and the number of operations is 1.

[0015] After setting the above conditions, when the display control device detects an operation on the extended UI of pull-down 1, it determines whether the operation on the extended UI satisfies the conditions shown in Rule 1 above. If the display control device determines that the operation on the extended UI satisfies the above conditions, it determines that user authentication is OK and permits input operations on the extended UI from pull-down 1 onwards. On the other hand, if the display control device determines that the operation on the extended UI does not satisfy the above conditions, it determines that user authentication is NG and does not permit input operations on the extended UI from pull-down 1 onwards.

[0016] Next, when the display control unit detects an operation on the extended UI of pull-down 2, it determines whether the operation on the extended UI satisfies the conditions shown in Rule 2 above. If the display control unit determines that the operation satisfies the above conditions, it determines that user authentication is OK and permits input operations on the extended UI from pull-down 2 onwards. On the other hand, if the display control unit determines that the operation on the extended UI does not satisfy the above conditions, it determines that user authentication is NG and does not permit input operations on the extended UI from pull-down 2 onwards.

[0017] That is, when the user inputs personal information such as their date of birth and address, they can input it without hesitation. However, in the case of impersonation, there is a possibility of hesitation or error. For example, when an imposter inputs personal information into the extended UI, they may accidentally misorder the operations of the extended UI, take a long time to operate, or perform the operation more than twice.

[0018] Therefore, as a condition for permitting an input operation of personal information into the extended UI, the display control device uses conditions such as the operation sequence, operation time, and number of operations of the extended UI. Thereby, the display control device can prevent an input operation from being performed on the extended UI of personal information due to impersonation.

[0019] Further, when the input operation of the user's personal information into the extended UI does not satisfy the above-mentioned conditions, the display control device may output an alert. Thereby, the display control device can detect an input operation of personal information due to impersonation.

[0020] [Configuration of Display Control Device] Using FIG. 3, a configuration example of the display control device 10 will be described. The display control device 10 includes an input unit 11, an output unit 12, a storage unit 13, and a control unit 14.

[0021] The input unit 11 is responsible for inputting various types of information into the display control device 10. The input unit 11 is, for example, an input interface connected to an input device such as a mouse or a keyboard. Further, the output unit 12 is responsible for outputting various types of information from the display control device 10. The output unit 12 is, for example, an output interface for outputting a screen of a web system, an existing UI on the screen, an extended UI, etc. to a display device such as a display.

[0022] The memory unit 13 stores various information that the control unit 14 refers to when it operates, and various information acquired when the control unit 14 operates. Here, the memory unit 13 is, for example, a semiconductor memory element such as RAM (Random Access Memory) or flash memory, or a storage device such as a hard disk or optical disc.

[0023] The storage unit 13 includes, for example, an extension component information storage unit that stores extension component information. This extension component information stores, for example, extension component information that indicates information about the extension UI corresponding to each UI (input item) that constitutes the screen of the Web system.

[0024] The extended component information includes, for example, the display position of the extended UI corresponding to each input field on the screen of the web system, the display information of the extended UI, and extended UI rule information that indicates the rules applied to the extended UI (e.g., selection input from a dropdown menu showing input candidates, text input, numerical input, etc.).

[0025] The extended UI rule information sets rules for controlling input operations to the extended UI of the web system. For example, it sets conditions regarding the order of operations, operation time, and number of operations required to permit input operations to the extended UI. The conditions for permitting input operations to the extended UI may be any one of the following: order of operations, operation time, or number of operations, or a combination of these.

[0026] Extended UI rule information may include not only the conditions for allowing input operations to the extended UI, but also rules regarding restrictions on input operations to the extended UI when input operations to the extended UI are not allowed (i.e., when the conditions are not met), and rules regarding what to display on the extended UI. For example, extended UI rule information may include rules such as not allowing input operations not only on the extended UI but also on subsequent extended UIs when input operations to the extended UI are not allowed, and displaying an alarm on the extended UI.

[0027] Furthermore, the contents of the extended component information, including the extended UI rule information mentioned above, can be changed by instructions from the administrator or other relevant party of the display control device 10.

[0028] The control unit 14 is responsible for controlling the entire display control device 10. The control unit 14 comprises a setting unit 141, a detection unit 142, a determination unit 143, and a control processing unit 144.

[0029] The setting unit 141 performs tasks such as creating new extended component information, updating extended component information, and editing extended component information based on instructions from the administrator of the display control device 10. For example, the setting unit 141 sets rules related to the extended UI for personal information in the extended UI rule information of the extended component information based on instructions from the administrator of the display control device 10.

[0030] For example, the configuration unit 141, based on instructions from the administrator, sets conditions in the extended UI rule information for the extended UI for personal information, specifying the order of operations, the duration of operations, and the number of operations required to permit input operations to the said extended UI. The configuration unit 141 may also, based on instructions from the administrator, set rules in the extended UI rule information for the extended UI for personal information, specifying restrictions on input operations to the said extended UI when the above conditions are not met, and rules regarding the content displayed on the said extended UI.

[0031] The detection unit 142 detects operations on the extended UI of the web system and creates operation information indicating the content of the detected operation. The detection unit 142 then stores the created operation information in the storage unit 13.

[0032] The determination unit 143 determines, based on the operation information of the extended UI, whether the operation on the extended UI of the Web system satisfies the conditions set in the extended UI rule information for permitting input operations on the said extended UI.

[0033] For example, if the determination unit 143 detects an input operation to the extended UI of personal information set in the extended UI rule information based on the operation information of the extended UI, it determines whether the input operation to the extended UI satisfies the conditions (conditions for operation order, operation time, and number of operations) set in the extended UI rule information for permitting the input operation to the extended UI.

[0034] The control processing unit 144 controls the input operations and display content of each extended UI based on the operation information of each extended UI and the determination result from the determination unit 143.

[0035] For example, if the determination unit 143 determines that an input operation to an extended UI satisfies the conditions for permitting an input operation to that extended UI, the control processing unit 144 permits the input operation to subsequent extended UIs based on the extended UI rule information. On the other hand, if the determination unit 143 determines that an input operation to an extended UI does not satisfy the conditions for permitting an input operation to that extended UI, the control processing unit 144 restricts the input operation to subsequent extended UIs based on the extended UI rule information and displays an alert indicating that there is a suspicion of impersonation of that extended UI.

[0036] [Example of processing procedure] Next, an example of the processing procedure of the display control device 10 will be explained using Figure 4. For example, the setting unit 141 of the display control device 10 sets information on the operation sequence, operation time, and number of operations of the personal information extension UI in the extension UI rule information based on the instruction input from the user, and stores it in the extension component information holding unit (S1). In addition, the operation information of the extension UI detected by the detection unit 142 is stored in the storage unit 13 (S2).

[0037] Subsequently, the determination unit 143 compares the operation information of the extended UI with the rules in the extended UI rule information and determines whether the operation information of the extended UI matches the rules (S3). For example, the determination unit 143 determines whether the operation content shown in the operation information of the extended UI for personal information satisfies the conditions for the operation order, operation time, and number of operations of the extended UI set in the extended UI rule information for permitting input operations to the extended UI.

[0038] In S3, the determination unit 143 determines whether the operation information of the extended UI matches the rules of the extended UI rule information (S3). For example, the determination unit 143 determines whether the operation information of the extended UI satisfies the conditions for the operation order, operation time, and number of operations of the extended UI in order to permit input operations to the extended UI.

[0039] Here, if the determination unit 143 determines that the operation information of the extended UI matches the rules of the extended UI rule information (Yes in S3), it determines that user authentication is OK, and the control processing unit 144 permits the continuation of operations to the extended UI and beyond based on the extended UI rule information (S4). After that, it returns to S3.

[0040] On the other hand, in S3, if the determination unit 143 determines that the operation information of the extended UI does not match the rules of the extended UI rule information (No in S3), it determines that user authentication is NG, and the control processing unit 144 prohibits operation to subsequent extended UIs based on the extended UI rule information, or displays an alert indicating suspected impersonation (S5).

[0041] In this way, the display control device 10 can prevent input through impersonation. As a result, the security of the web system can be improved.

[0042] [System configuration, etc.] Furthermore, the components of each part shown in the diagram are functional concepts and do not necessarily need to be physically configured as shown. In other words, the specific forms of distribution and integration of each device are not limited to those shown in the diagram, and all or part of them can be functionally or physically distributed and integrated in any unit according to various loads and usage conditions. Moreover, all or any part of the processing functions performed by each device can be realized by a CPU and the program executed on that CPU, or by hardware using wired logic.

[0043] Furthermore, among the processes described in the embodiments described above, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically by known methods. In addition, the processing procedures, control procedures, specific names, and information including various data and parameters shown in the above document and drawings can be arbitrarily changed unless otherwise specified.

[0044] [program] The aforementioned display control device 10 can be implemented by installing a program as packaged software or online software on a desired computer. For example, by having the above program run on an information processing device, the information processing device can function as the display control device 10. The information processing device referred to here includes desktop or notebook personal computers. In addition, the category of information processing device also includes mobile communication terminals such as smartphones, mobile phones and PHS (Personal Handyphone System), and terminals such as PDA (Personal Digital Assistant).

[0045] Furthermore, the display control device 10 can also be implemented as a server device that provides services related to the above processing to a terminal device used by a user, with the user's terminal device acting as the client. In this case, the server device may be implemented as a web server, or it may be implemented as a cloud service that provides services related to the above processing through outsourcing.

[0046] Figure 5 shows an example of a computer running a display control program. Computer 1000 has, for example, memory 1010 and a CPU 1020. Computer 1000 also has a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. These components are connected by a bus 1080.

[0047] Memory 1010 includes ROM (Read Only Memory) 1011 and RAM (Random Access Memory) 1012. ROM 1011 stores, for example, a boot program such as BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to the hard disk drive 1090. The disk drive interface 1040 is connected to the disk drive 1100. For example, a removable storage medium such as a magnetic disk or optical disk is inserted into the disk drive 1100. The serial port interface 1050 is connected to, for example, a mouse 1110 and a keyboard 1120. The video adapter 1060 is connected to, for example, a display 1130.

[0048] The hard disk drive 1090 stores, for example, the OS 1091, application program 1092, program module 1093, and program data 1094. That is, the program that defines each process executed by the display control device 10 is implemented as a program module 1093 in which executable code for a computer is written. The program module 1093 is stored, for example, in the hard disk drive 1090. For example, a program module 1093 for executing a process similar to the functional configuration of the display control device 10 is stored in the hard disk drive 1090. Note that the hard disk drive 1090 may be replaced by an SSD (Solid State Drive).

[0049] Furthermore, the data used in the processing of the above-described embodiment is stored as program data 1094 in, for example, memory 1010 or hard disk drive 1090. The CPU 1020 then reads the program module 1093 and program data 1094 stored in memory 1010 or hard disk drive 1090 into RAM 1012 as needed and executes them.

[0050] Furthermore, the program module 1093 and program data 1094 are not limited to being stored in the hard disk drive 1090; for example, they may be stored in a removable storage medium and read by the CPU 1020 via a disk drive 1100 or the like. Alternatively, the program module 1093 and program data 1094 may be stored in another computer connected via a network (LAN (Local Area Network), WAN (Wide Area Network), etc.). The program module 1093 and program data 1094 may then be read by the CPU 1020 from the other computer via a network interface 1070.

[0051] 10 Display control device 11 Input section 12 Output section 13 Communications Department 14 Storage section 15 Control Unit 141 Settings Section 142 Detection unit 143 Judgment section 144 Control Processing Unit

Claims

1. A storage unit stores extended UI rule information, which is a rule for controlling input operations on an extended UI for personal information in a web system, and which stores conditions for permitting input operations on the extended UI, including conditions related to the extended UI for personal information that was permitted to be accessed immediately before the said extended UI, the operation time of the said extended UI, and the number of operations. When an input operation to a predetermined extended UI is detected, a determination unit determines whether the input operation to the extended UI satisfies all the conditions set in the extended UI rule information regarding the extended UI for which input operations were permitted immediately before the extended UI, the operation time of the extended UI, and the number of operations. If it is determined that an input operation to the said extended UI does not meet the conditions for allowing input operations to the said extended UI, a control processing unit will restrict input operations to subsequent extended UIs. A display control device characterized by comprising:

2. Based on user input, the setting unit sets conditions in the extended UI rule information for permitting input operations to the extended UI, specifically conditions relating to the extended UI for personal information for which input operations were permitted immediately before the extended UI. The display control device according to claim 1, further comprising:

3. Based on user input, the setting unit sets conditions in the extended UI rule information that permit input operations to the extended UI, specifically conditions related to the operation time of the extended UI. The display control device according to claim 1, further comprising:

4. Based on user input, the setting unit sets conditions in the extended UI rule information that permit input operations to the extended UI, specifically conditions related to the number of operations performed on the extended UI. The display control device according to claim 1, further comprising:

5. Based on user input, the extended UI rule information further includes a setting unit that sets restrictions on input operations to subsequent extended UIs when the conditions for allowing input operations to the extended UI are not met. The control processing unit is If it is determined that an input operation to the extended UI does not meet the conditions for allowing input operations to that extended UI, input operations to subsequent extended UIs will be restricted based on the extended UI rule information. The display control device according to feature 1.

6. The setting unit further, Based on user input, the extended UI rule information sets the content to be displayed on the extended UI when the conditions for allowing input operations on the extended UI are not met. The control processing unit further, If it is determined that an input operation to the extended UI does not meet the conditions for allowing input operations to the extended UI, the display content for cases where the conditions are not met will be displayed to the extended UI based on the extended UI rule information. The display control device according to claim 5.

7. A display control method executed by a display control device, The aforementioned display control device is As a rule for controlling input operations to an extended UI for personal information in a web system, the system includes a step of determining whether, when an input operation to a predetermined extended UI is detected, the input operation to the extended UI satisfies all the conditions set in the extended UI rule information regarding the extended UI for personal information that was permitted to be entered immediately before the said extended UI, the operation time of the said extended UI, and the number of operations, as conditions for permitting input operations to the said extended UI, and based on extended UI rule information that sets conditions regarding the extended UI for personal information that was permitted to be entered immediately before the said extended UI, the operation time of the said extended UI, and the number of operations, If it is determined that an input operation to the said extended UI does not meet the conditions for allowing input operations to the said extended UI, the process of restricting input operations to subsequent extended UIs is performed. A display control method characterized by including the following.

8. As a rule for controlling input operations to an extended UI for personal information in a web system, the system includes a step of determining whether, when an input operation to a predetermined extended UI is detected, the input operation to the extended UI satisfies all the conditions set in the extended UI rule information regarding the extended UI for personal information that was permitted to be entered immediately before the said extended UI, the operation time of the said extended UI, and the number of operations, as conditions for permitting input operations to the said extended UI, and based on extended UI rule information that sets conditions regarding the extended UI for personal information that was permitted to be entered immediately before the said extended UI, the operation time of the said extended UI, and the number of operations, If it is determined that an input operation to the said extended UI does not meet the conditions for allowing input operations to the said extended UI, the process of restricting input operations to subsequent extended UIs is performed. A display control program that causes a computer to execute something.

Images